last executing test programs:

13m4.879661613s ago: executing program 4 (id=269):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, 0x56, 0x101, 0x70bd2a, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xc0d1}, 0x40)

13m3.831102676s ago: executing program 4 (id=273):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004090)
syz_emit_ethernet(0x3e, &(0x7f0000001780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/14, 0xe}, 0xdabc}], 0x1, 0x10022, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00'})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r2, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)

13m3.541299363s ago: executing program 4 (id=278):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f00000002c0)=r4}, 0x20)

12m56.653890204s ago: executing program 4 (id=302):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x3, 0x6, 0x2, 0x2, 0xc, 0x1, 0x8, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x84, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x40, 0x5, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

12m56.36953226s ago: executing program 4 (id=307):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x9, 0x401}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x0, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xffff1000, 0xc, 0xa0, 0xb1, 0x8, 0x3, 0x6, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0xe0040010, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12m53.381292856s ago: executing program 4 (id=315):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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")
socket$tipc(0x1e, 0x5, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_open_dev$loop(0x0, 0x7, 0x180862)
syz_open_dev$MSR(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200480, 0x0)
mknod(&(0x7f0000000340)='./bus\x00', 0x2, 0x40)

12m38.16879073s ago: executing program 32 (id=315):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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")
socket$tipc(0x1e, 0x5, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_open_dev$loop(0x0, 0x7, 0x180862)
syz_open_dev$MSR(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200480, 0x0)
mknod(&(0x7f0000000340)='./bus\x00', 0x2, 0x40)

12m2.062518722s ago: executing program 1 (id=460):
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100), 0xc)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\x01\x00\x00\x00\x00\x00\x00\x00\'\x11\x13:\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcdR\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00\x00\x00\x00\x00', 0x0)

12m0.924974128s ago: executing program 1 (id=463):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11m58.803538785s ago: executing program 1 (id=468):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)

11m57.16873179s ago: executing program 1 (id=471):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[])
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1c6)

11m54.775131083s ago: executing program 1 (id=474):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000))
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r4, 0x6609)

11m53.341304954s ago: executing program 1 (id=476):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)

11m37.945374513s ago: executing program 33 (id=476):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8)

7m20.170771204s ago: executing program 2 (id=1052):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, r0)
r1 = socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
ptrace(0x10, 0x0)
ptrace$setregset(0x4205, 0x0, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1})

7m17.387874215s ago: executing program 2 (id=1059):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)})

7m15.069199076s ago: executing program 2 (id=1064):
socket(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
acct(&(0x7f0000000000)='./file0\x00')
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0xff, 0xfffff00c}, {0x6, 0x0, 0x0, 0x2}]}, 0x10)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1400c800)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x3})
r4 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x181000)
ioctl$MON_IOCX_MFETCH(r4, 0xc00c9207, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102)
write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)

7m10.856315798s ago: executing program 2 (id=1069):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r0 = syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000001080)=<r2=>0x0, &(0x7f0000001040))
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10021)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, 0x0, 0x40000)
ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0xa)
io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0)

7m5.151784894s ago: executing program 2 (id=1076):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000008c0)='./file1\x00', 0x800010, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xf5, 0x2f4, &(0x7f0000001000)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
socket$packet(0x11, 0x3, 0x300)
syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa"], 0x20)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
getsockopt(r5, 0x6, 0x5, 0x0, &(0x7f0000001a40))
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x1, 0xffff, 0x400e0a, 0x7f, "203c5e0000ff765e000080fffffffffffffff2", 0x8, 0x5})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6m59.955385998s ago: executing program 2 (id=1097):
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x82f49000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x72, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000640000000000019078ac100001ac1414aa05009006000000e0420000000000000000110000000000007f000001443400030a01012f00000000e0000001000000007f00000100000200ac1414aa00ff00000000000000000000ac141400000000009eb905b65cf57f56e6871be5b2c78811433623477f73"], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
setresuid(0x0, 0xee00, 0x0)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000204e0000", 0x58}], 0x1)
setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="e33110495bfd", @empty, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x2, 0x6, 'mi\b', 0x10, 0x11, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x7e, 0x0, 0x7, 0x1, 0x0, 0x3, 0x67}], {0x4e21, 0x4e22, 0x8}}}}}}, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @loopback}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x7}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0xe7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffff01}, 0x1c)
mmap$snddsp_control(&(0x7f0000002000/0xf000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000)

6m44.027472878s ago: executing program 34 (id=1097):
r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x82f49000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x72, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800450000640000000000019078ac100001ac1414aa05009006000000e0420000000000000000110000000000007f000001443400030a01012f00000000e0000001000000007f00000100000200ac1414aa00ff00000000000000000000ac141400000000009eb905b65cf57f56e6871be5b2c78811433623477f73"], 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
setresuid(0x0, 0xee00, 0x0)
writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c0001000a0c100000000000204e0000", 0x58}], 0x1)
setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@random="e33110495bfd", @empty, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @udp={0x2, 0x6, 'mi\b', 0x10, 0x11, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x7e, 0x0, 0x7, 0x1, 0x0, 0x3, 0x67}], {0x4e21, 0x4e22, 0x8}}}}}}, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @loopback}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x7}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0xe7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffff01}, 0x1c)
mmap$snddsp_control(&(0x7f0000002000/0xf000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000)

6m23.639377446s ago: executing program 5 (id=1141):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xe0, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

6m23.096012758s ago: executing program 5 (id=1144):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000e73f3c20e50cfbf34c03735645dbac47c602bc140dbef656c8cc65db54c0cb1e7b2a1f472e13372b9f429947ca780cd95f3c1d6b9ec50311f717ab960bb88694e273cd0e3a069a957129b01cf8fb66af3f65c481", @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000180000000600000000000000090000004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m19.80969685s ago: executing program 5 (id=1149):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005dfc00"/20], 0x0, 0xfc5f}, 0x28)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)

6m15.869688236s ago: executing program 5 (id=1154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xab46c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000001e40)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084)

6m11.894387433s ago: executing program 5 (id=1161):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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")
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000240))

6m6.390529164s ago: executing program 5 (id=1167):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000040)=""/4128, &(0x7f0000000000)=0x1020)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59)
quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5m51.139407709s ago: executing program 35 (id=1167):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000000040)=""/4128, &(0x7f0000000000)=0x1020)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x59)
quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000900, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m31.974751923s ago: executing program 0 (id=1821):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

2m31.974594833s ago: executing program 0 (id=1822):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa)
open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20)

2m31.011425694s ago: executing program 0 (id=1831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2}, 0x50)

2m30.858578758s ago: executing program 0 (id=1832):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000340)='big_key\x00', &(0x7f0000000380)={'syz', 0x0}, r0)
r1 = socket$kcm(0x29, 0x2, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
ptrace$setregset(0x4205, 0x0, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

2m30.210097272s ago: executing program 0 (id=1840):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20)

2m30.070714525s ago: executing program 0 (id=1841):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x0, 0x3de})

2m15.017017746s ago: executing program 36 (id=1841):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000001c0)={0x0, 0x3de})

12.954088056s ago: executing program 6 (id=2515):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x1}, 0x8)

11.807821541s ago: executing program 6 (id=2523):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119})
io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)

7.258257011s ago: executing program 7 (id=2555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x27, 0x0, &(0x7f00000002c0))
socket(0x2b, 0x1, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x34324142})
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0))

6.020545628s ago: executing program 9 (id=2558):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00008000000000000000020000000000000000005ff4f8b1202e3db6741dc34ab96f975eda0d15a9b63171b59c2a09adb61d9bb0065809da266b137b0cca3f9556fbe287d189b26b5675bc7640adc1fa0d7366675a8f8c8e"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000e73f3c20e50cfbf34c03735645dbac47c602bc140dbef656c8cc65db54c0cb1e7b2a1f472e13372b9f429947ca780cd95f3c1d6b9ec50311f717ab960bb88694e273cd0e3a069a957129b01cf8fb66af3f65c481", @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000180000000600000000000000090000004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b700000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.94664736s ago: executing program 6 (id=2559):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e870", 0x2}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/97, 0x61}], 0x1}, 0x0)

5.682966306s ago: executing program 7 (id=2561):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000280)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@compress_force}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

5.339261534s ago: executing program 6 (id=2563):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r1 = syz_open_pts(r0, 0x141601)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xb840c58f)
close(0x4)

4.949931812s ago: executing program 9 (id=2566):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

4.824160485s ago: executing program 9 (id=2568):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119})
io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)

4.770644406s ago: executing program 8 (id=2569):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119})
io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)

4.071590421s ago: executing program 7 (id=2570):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'macvlan1\x00', 0x7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x15)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getrlimit(0x4, &(0x7f0000000340))
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={<r6=>0x0, 0x1f}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r6, 0xfff}, 0x8)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

3.266636169s ago: executing program 6 (id=2571):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000080), 0x40002df, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x27, 0x0, &(0x7f00000002c0))
socket(0x2b, 0x1, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x0, 0xd, 0x2, "134604cea4ddbc704c17bc74772190f5070001ebfffdfffffee793000000e000", 0x34324142})
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0))

2.596913923s ago: executing program 9 (id=2572):
socket$nl_netfilter(0x10, 0x3, 0xc)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.489540436s ago: executing program 9 (id=2573):
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x20, 0x4, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x7, 0xff}}}}}]}}]}}, 0x0)

2.440601577s ago: executing program 8 (id=2574):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x8, 0x9, 0x5})
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

2.352015019s ago: executing program 8 (id=2575):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x2, 0x7])

2.115149554s ago: executing program 3 (id=2576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5f98}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x26044028}, 0x800)

1.890655659s ago: executing program 3 (id=2577):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB="00008000000000000000020000000000000000005ff4f8b1202e3db6741dc34ab96f975eda0d15a9b63171b59c2a09adb61d9bb0065809da266b137b0cca3f9556fbe287d189b26b5675bc7640adc1fa0d7366675a8f8c8e"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000e40)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000180000000600000000000000090000004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.85215199s ago: executing program 7 (id=2578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)

1.83938975s ago: executing program 3 (id=2579):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x3e2, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
prlimit64(0x0, 0xa, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180))
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77f)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f00000004c0)='./bus/file0\x00', 0x2)
syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
socket$inet_sctp(0x2, 0x1, 0x84)
write$binfmt_script(r4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r5 = syz_open_dev$vim2m(&(0x7f0000004300), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x2, 0xfdfffffe, 0x2, {0xe, @sliced={0x65db, [0xff01, 0x5, 0x3ff, 0x1, 0xdd8, 0x800, 0xff5e, 0xc3dd, 0x3, 0x2, 0x2, 0x7, 0xbd, 0x1, 0xfff, 0x6, 0x9, 0x8001, 0x7fff, 0x785, 0xb54, 0x4, 0xd01e, 0x9, 0x9, 0x6, 0x8, 0x6, 0x40, 0x9, 0x8, 0x1944, 0x1, 0x6, 0xe62, 0x2, 0x5, 0x9cb6, 0x6, 0xf1, 0x6, 0x7, 0x43, 0x400, 0xff, 0x7f, 0x95d], 0xfffffff8}}, 0x40000000})
write$binfmt_misc(r3, 0x0, 0x0)

1.750323212s ago: executing program 8 (id=2580):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

1.749235122s ago: executing program 3 (id=2581):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
setuid(0xee01)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112})

1.729647282s ago: executing program 7 (id=2582):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119})
io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)

1.664713234s ago: executing program 3 (id=2583):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.486523938s ago: executing program 3 (id=2584):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119})
io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)

973.954739ms ago: executing program 8 (id=2585):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001440)="420fc7bc4898580000640f01c50f01c566baf80c0f01c4ef66bafc0c652e0f0967670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4d}], 0x1, 0x72, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffd, 0x5479, 0x1035, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0x7, 0xbf7, 0xfff, 0x8000000000005, 0x800000068], 0x41000, 0x80cd4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

841.549462ms ago: executing program 8 (id=2586):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000)
r1 = eventfd2(0x3, 0x0)
fcntl$notify(r1, 0x402, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x4000000, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0)
r5 = io_uring_setup(0x101822, &(0x7f0000000000)={0x0, 0x627c, 0x0, 0xfffffffc, 0x119})
io_uring_register$IORING_REGISTER_FILES(r5, 0x23, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)

794.530123ms ago: executing program 6 (id=2587):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0xa2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_addr={0x44, 0xc, 0xe8, 0x1, 0x5, [{@rand_addr=0x64010100, 0xe450}]}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, '\x00\x00\x00\x00\x00\x00\x00'}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

299.873944ms ago: executing program 7 (id=2588):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'macvlan1\x00', 0x7})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x15)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x9)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200008, 0x200000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getrlimit(0x4, &(0x7f0000000340))
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={<r6=>0x0, 0x1f}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000300)={r6, 0xfff}, 0x8)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)

0s ago: executing program 9 (id=2589):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6f485738025097bc000020008aabbd301e5c0100b7b46d3f5a4fd447b2f3caa73d", 0x21)

kernel console output (not intermixed with test programs):

etdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.790435][ T7711] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.806977][ T7711] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  386.868220][ T7730] device syzkaller0 entered promiscuous mode
[  391.113982][ T7837] device syzkaller0 entered promiscuous mode
[  395.685007][ T7890] NILFS (nullb0): couldn't find nilfs on the device
[  399.425035][ T7917] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed
[  401.760521][ T7980] tmpfs: Unknown parameter 'fscontext'
[  404.109230][ T7945] loop6: detected capacity change from 0 to 4096
[  404.411049][ T7945] EXT4-fs (loop6): inline encryption not supported
[  404.435473][ T7996] NILFS (nullb0): couldn't find nilfs on the device
[  404.667604][ T7945] EXT4-fs: failed to create workqueue
[  405.021007][ T7945] EXT4-fs (loop6): mount failed
[  405.571848][   T26] audit: type=1400 audit(1783066183.722:99): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=8003 comm="syz.2.851"
[  406.888328][ T8034] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6303] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           
[  413.986074][ T8099] loop2: detected capacity change from 0 to 4096
[  417.521945][ T8124] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.990342][ T8099] ntfs3: loop2: Failed to load $Extend.
[  418.560106][ T8120] tipc: Resetting bearer <eth:syzkaller0>
[  419.657566][ T8119] tipc: Disabling bearer <eth:syzkaller0>
[  419.997753][ T8154] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  420.068321][ T8154] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  420.087133][ T8154] team0: Port device macvlan2 added
[  420.966437][ T8159] block nbd0: shutting down sockets
[  421.234447][ T8166] netlink: 68 bytes leftover after parsing attributes in process `syz.2.881'.
[  423.152825][ T8175] device syzkaller0 entered promiscuous mode
[  423.959421][ T8190] block device autoloading is deprecated and will be removed.
[  424.955698][ T8208] ipt_REJECT: ECHOREPLY no longer supported.
[  424.975345][ T8208] IPv6: NLM_F_CREATE should be specified when creating new route
[  425.718367][ T8214] netlink: 96 bytes leftover after parsing attributes in process `syz.2.895'.
[  427.150694][ T8211] block device autoloading is deprecated and will be removed.
[  428.833571][ T8227] block device autoloading is deprecated and will be removed.
[  430.946936][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.902'.
[  437.451446][ T4604] Bluetooth: hci2: command 0x0406 tx timeout
[  439.853716][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  439.860051][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  441.194205][ T8341] loop2: detected capacity change from 0 to 256
[  442.181294][ T8341] FAT-fs (loop2): Directory bread(block 64) failed
[  442.260244][ T8341] FAT-fs (loop2): Directory bread(block 65) failed
[  442.309437][ T8344] device syzkaller0 entered promiscuous mode
[  442.331012][ T8341] FAT-fs (loop2): Directory bread(block 66) failed
[  442.332670][ T8344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  442.347835][ T8343] tipc: Resetting bearer <eth:syzkaller0>
[  442.361072][ T8341] FAT-fs (loop2): Directory bread(block 67) failed
[  442.378273][ T8341] FAT-fs (loop2): Directory bread(block 68) failed
[  442.389988][ T8343] tipc: Disabling bearer <eth:syzkaller0>
[  442.398429][ T8341] FAT-fs (loop2): Directory bread(block 69) failed
[  442.415529][ T8341] FAT-fs (loop2): Directory bread(block 70) failed
[  442.430952][ T8341] FAT-fs (loop2): Directory bread(block 71) failed
[  442.447881][ T8341] FAT-fs (loop2): Directory bread(block 72) failed
[  442.456776][ T8341] FAT-fs (loop2): Directory bread(block 73) failed
[  443.027606][ T8349] loop3: detected capacity change from 0 to 4096
[  443.413396][ T8349] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  445.242941][ T4282] Bluetooth: (null): Invalid header checksum
[  445.904586][ T4198] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  447.142539][ T8378] loop3: detected capacity change from 0 to 256
[  447.171525][ T8378] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  447.573031][ T8378] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  447.626478][ T8378] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  454.390862][ T8423] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  454.403722][ T8423] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  456.084772][ T8432] device syzkaller0 entered promiscuous mode
[  456.120366][ T8432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.207028][ T1202] block nbd0: Attempted send on invalid socket
[  456.214871][ T1202] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  456.230717][ T8434] befs: (nbd0): unable to read superblock
[  456.609449][ T8431] tipc: Resetting bearer <eth:syzkaller0>
[  457.375440][ T8431] tipc: Disabling bearer <eth:syzkaller0>
[  460.993269][ T8466] loop6: detected capacity change from 0 to 256
[  462.936375][ T8481] loop5: detected capacity change from 0 to 512
[  463.044305][ T8466] FAT-fs (loop6): Directory bread(block 64) failed
[  463.054837][ T8466] FAT-fs (loop6): Directory bread(block 65) failed
[  463.066641][ T8466] FAT-fs (loop6): Directory bread(block 66) failed
[  463.086700][ T8466] FAT-fs (loop6): Directory bread(block 67) failed
[  463.111408][ T8466] FAT-fs (loop6): Directory bread(block 68) failed
[  463.117994][ T8466] FAT-fs (loop6): Directory bread(block 69) failed
[  463.134808][ T8481] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  463.166855][ T8466] FAT-fs (loop6): Directory bread(block 70) failed
[  463.174039][ T8466] FAT-fs (loop6): Directory bread(block 71) failed
[  463.180896][ T8466] FAT-fs (loop6): Directory bread(block 72) failed
[  463.187456][ T8466] FAT-fs (loop6): Directory bread(block 73) failed
[  463.202707][ T8481] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.310944][ T4941] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  464.337838][ T4941] usb 1-1: Using ep0 maxpacket: 8
[  464.481051][ T4941] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  464.999728][ T4941] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  465.374810][ T4941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  465.384966][ T4941] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  465.395622][ T4941] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  465.408949][ T4941] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  465.418713][ T4941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.357711][ T4941] usb 1-1: usb_control_msg returned -32
[  466.562939][ T4941] usbtmc 1-1:16.0: can't read capabilities
[  466.578328][ T4941] usb 1-1: USB disconnect, device number 6
[  466.817924][ T8514] xt_l2tp: unknown flags: 17
[  467.759039][ T8514] loop3: detected capacity change from 0 to 32768
[  468.397052][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'.
[  473.221006][ T4264] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  473.611033][ T4264] usb 1-1: Using ep0 maxpacket: 32
[  474.303792][ T8547] xt_bpf: check failed: parse error
[  475.441017][ T4264] usb 1-1: string descriptor 0 read error: -71
[  475.447903][ T4264] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  475.490894][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.517374][ T4264] usb 1-1: config 0 descriptor??
[  475.541042][ T4264] usb 1-1: can't set config #0, error -71
[  476.471879][ T4264] usb 1-1: USB disconnect, device number 7
[  476.849027][ T8589] device syzkaller0 entered promiscuous mode
[  476.909624][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'.
[  476.944208][ T8589] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.791266][ T8588] tipc: Resetting bearer <eth:syzkaller0>
[  478.857674][ T8605] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  478.864981][ T8605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  478.909368][ T8605] vhci_hcd vhci_hcd.0: Device attached
[  478.933367][ T8607] vhci_hcd: connection closed
[  478.940891][ T6652] vhci_hcd: stop threads
[  478.950004][ T6652] vhci_hcd: release socket
[  478.987709][ T6652] vhci_hcd: disconnect device
[  479.018979][ T8588] tipc: Disabling bearer <eth:syzkaller0>
[  479.377075][ T8617] NILFS (nullb0): couldn't find nilfs on the device
[  479.986604][ T8624] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  480.001467][ T8624] team0: Port device macvlan2 added
[  480.877265][ T8629] loop2: detected capacity change from 0 to 64
[  483.347310][ T8652] device syzkaller0 entered promiscuous mode
[  483.366352][ T8652] simple: basic_1
[  485.243621][ T8665] loop2: detected capacity change from 0 to 512
[  485.391168][ T8671] NILFS (nullb0): couldn't find nilfs on the device
[  490.124370][ T8665] EXT4-fs: failed to create workqueue
[  490.130324][ T8665] EXT4-fs (loop2): mount failed
[  496.415267][ T8727] NILFS (nullb0): couldn't find nilfs on the device
[  497.737895][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  497.887237][ T8742] device bridge_slave_0 left promiscuous mode
[  497.950350][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.497422][ T8742] device bridge_slave_1 left promiscuous mode
[  498.508160][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.516715][ T8747] overlayfs: overlapping lowerdir path
[  498.597002][ T8745] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  498.619452][ T8742] bond0: (slave bond_slave_0): Releasing backup interface
[  498.756803][ T8742] bond0: (slave bond_slave_1): Releasing backup interface
[  498.885907][ T8742] team0: Port device team_slave_0 removed
[  499.641896][ T8742] team0: Port device team_slave_1 removed
[  499.652419][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  499.676048][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0
[  499.732077][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  499.739950][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1
[  499.794225][ T8742] bond1: (slave ip6gretap1): Releasing active interface
[  499.833302][ T8742] batman_adv: batadv0: Removing interface: vxlan0
[  500.929230][ T8768] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1038'.
[  501.293740][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  501.300431][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  501.383049][ T8777] NILFS (nullb0): couldn't find nilfs on the device
[  502.368415][ T8781] loop5: detected capacity change from 0 to 32768
[  502.542600][ T8781] XFS (loop5): Mounting V5 Filesystem
[  503.161812][ T8781] XFS (loop5): Ending clean mount
[  503.185048][ T8781] XFS (loop5): Quotacheck needed: Please wait.
[  503.453471][ T8781] XFS (loop5): Quotacheck: Done.
[  504.476639][ T5633] XFS (loop5): Unmounting Filesystem
[  505.081039][ T4294] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  505.478587][ T4294] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.489542][ T4294] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  505.507222][ T4294] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  505.537829][ T4294] usb 4-1: config 0 interface 0 has no altsetting 0
[  505.746773][ T4294] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  505.758491][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.790886][ T4294] usb 4-1: Product: syz
[  505.800190][ T4294] usb 4-1: Manufacturer: syz
[  505.811551][ T4294] usb 4-1: SerialNumber: syz
[  505.830458][ T4294] usb 4-1: config 0 descriptor??
[  505.885741][ T4294] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  506.477528][ T4294] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  506.607702][ T4294] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  506.802510][ T8827] syz.5.1049 (8827) used greatest stack depth: 17376 bytes left
[  506.812309][ T4294] snd_usb_toneport: probe of 4-1:0.0 failed with error -22
[  507.519576][ T4177] usb 4-1: USB disconnect, device number 5
[  508.265131][ T8838] loop3: detected capacity change from 0 to 256
[  508.469771][ T8838] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  508.611367][ T4294] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  513.520963][ T4294] usb 7-1: unable to get BOS descriptor or descriptor too short
[  513.528700][ T4294] usb 7-1: no configurations
[  513.653351][ T4294] usb 7-1: can't read configurations, error -22
[  514.690892][ T4604] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  514.964695][ T4604] usb 4-1: Using ep0 maxpacket: 8
[  515.581083][ T4941] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  515.940956][ T4604] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  515.949206][ T4604] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  516.060863][ T4941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.071517][ T4941] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  516.081269][ T4941] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  516.094665][ T4941] usb 6-1: config 0 interface 0 has no altsetting 0
[  516.112615][ T4604] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  516.122603][ T4604] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  516.132861][ T4604] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  516.146040][ T4604] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  516.155480][ T4604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.217352][ T8899] netlink: 'syz.0.1071': attribute type 10 has an invalid length.
[  516.225360][ T8899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1071'.
[  516.891322][ T4941] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  516.935480][ T4941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.999065][ T4941] usb 6-1: Product: syz
[  517.040489][ T4941] usb 6-1: Manufacturer: syz
[  517.101090][ T4941] usb 6-1: SerialNumber: syz
[  517.247431][ T4604] usb 4-1: can't set config #16, error -71
[  517.255996][ T4604] usb 4-1: USB disconnect, device number 6
[  517.288836][ T4941] usb 6-1: config 0 descriptor??
[  517.289363][ T8899] team0: Port device geneve0 added
[  517.638375][ T8905] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—�¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 8905 comm: syz.0.1073)
[  517.653876][ T8905] tmpfs: Bad value for 'mpol'
[  519.480741][ T8906] loop3: detected capacity change from 0 to 32768
[  519.962234][ T4941] usb 6-1: can't set config #0, error -71
[  520.236755][ T4941] usb 6-1: USB disconnect, device number 4
[  521.723389][ T8919] device syzkaller0 entered promiscuous mode
[  522.578367][ T8923] loop2: detected capacity change from 0 to 128
[  522.623263][ T8923] FAT-fs (loop2): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value
[  526.210899][ T4609] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  527.431883][ T4609] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.550155][ T4609] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  528.581300][ T4609] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  528.624050][ T4609] usb 1-1: config 0 interface 0 has no altsetting 0
[  529.220965][ T4609] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  529.926603][ T4609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.937272][ T4609] usb 1-1: Product: syz
[  529.942774][ T4609] usb 1-1: Manufacturer: syz
[  529.954928][ T4609] usb 1-1: config 0 descriptor??
[  529.977341][ T4609] usb 1-1: can't set config #0, error -71
[  530.008777][ T4609] usb 1-1: USB disconnect, device number 8
[  530.554345][ T8978] netlink: 'syz.3.1093': attribute type 10 has an invalid length.
[  530.562701][ T8978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1093'.
[  530.584680][ T8978] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.594190][ T8978] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  530.603050][ T8978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  530.612091][ T8978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.637770][ T8978] team0: Port device geneve0 added
[  531.521546][ T8991] loop5: detected capacity change from 0 to 64
[  533.811408][ T9001] futex_wake_op: syz.6.1096 tries to shift op by 144; fix this program
[  537.036246][  T150] block nbd3: Attempted send on invalid socket
[  537.042715][  T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  537.054289][ T9037] efs: cannot read volume header
[  537.808556][ T9030] tipc: Started in network mode
[  537.858849][ T9030] tipc: Node identity aa93633d3548, cluster identity 4711
[  537.869186][ T9030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.886939][ T9034] device syzkaller0 entered promiscuous mode
[  539.981142][ T4294] tipc: Node number set to 2681955133
[  540.230018][ T9028] tipc: Resetting bearer <eth:syzkaller0>
[  540.738444][ T9060] kernel profiling enabled (shift: 5)
[  541.697292][ T9028] tipc: Disabling bearer <eth:syzkaller0>
[  541.832335][ T9043] input: syz1 as /devices/virtual/input/input8
[  542.506813][ T9071] loop5: detected capacity change from 0 to 1024
[  543.371040][ T9071] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  543.437343][ T9074] virt_wifi0 speed is unknown, defaulting to 1000
[  543.874651][ T9088] loop3: detected capacity change from 0 to 8
[  544.342868][ T9088] SQUASHFS error: xz decompression failed, data probably corrupt
[  544.351181][ T9088] SQUASHFS error: Failed to read block 0x108: -5
[  544.357572][ T9088] SQUASHFS error: Unable to read metadata cache entry [106]
[  544.365014][ T9088] SQUASHFS error: Unable to read inode 0x11f
[  545.400456][ T4294] Bluetooth: hci0: command 0x0409 tx timeout
[  546.695868][  T150] block nbd3: Attempted send on invalid socket
[  546.702507][  T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  546.713970][ T9097] befs: (nbd3): unable to read superblock
[  547.527520][ T4264] Bluetooth: hci0: command 0x041b tx timeout
[  549.620983][ T4264] Bluetooth: hci0: command 0x040f tx timeout
[  550.855505][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.929384][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.996255][ T9074] chnl_net:caif_netlink_parms(): no params data found
[  551.135608][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.251181][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.279916][ T9074] bridge0: port 1(bridge_slave_0) entered blocking state
[  551.287999][ T9074] bridge0: port 1(bridge_slave_0) entered disabled state
[  551.297193][ T9074] device bridge_slave_0 entered promiscuous mode
[  551.306201][ T9074] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.313444][ T9074] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.321959][ T9074] device bridge_slave_1 entered promiscuous mode
[  551.350376][ T9074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  551.362496][ T9074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  551.394776][ T9074] team0: Port device team_slave_0 added
[  551.434373][ T9074] team0: Port device team_slave_1 added
[  551.851714][ T4941] Bluetooth: hci0: command 0x0419 tx timeout
[  553.961244][ T9132] loop3: detected capacity change from 0 to 64
[  554.463722][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.969504][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.170915][ T9074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.094292][ T9074] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.124365][ T9074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.667187][ T9074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.959295][ T9074] device hsr_slave_0 entered promiscuous mode
[  558.982934][ T9074] device hsr_slave_1 entered promiscuous mode
[  559.744249][  T154] tipc: Left network mode
[  560.106351][ T9169] loop6: detected capacity change from 0 to 512
[  561.854026][ T9169] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  561.904622][ T9169] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouid32,data_err=abort,user_xattr,max_batch_time=0x0000000000000200,dioread_nolock,,errors=continue. Quota mode: writeback.
[  561.923082][ T9169] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  561.939280][  T154] bond1: (slave ip6gretap1): Releasing active interface
[  562.635525][ T9192] loop3: detected capacity change from 0 to 4096
[  562.735996][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  562.742368][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  562.904557][ T9074] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  563.865248][ T9074] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  564.021231][ T9074] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  564.157434][ T9074] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  566.528697][ T9074] 8021q: adding VLAN 0 to HW filter on device bond0
[  566.750293][ T9074] 8021q: adding VLAN 0 to HW filter on device team0
[  567.461472][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  567.469542][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  567.482212][ T9237] loop3: detected capacity change from 0 to 4096
[  567.514475][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  567.541846][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  567.563078][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.570342][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  567.581189][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  567.646647][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  567.681672][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.688837][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state
[  567.854381][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  569.408042][ T9237] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  569.701959][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  569.822817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  569.861930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  569.981488][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  570.122202][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  570.141461][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  570.174005][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  570.320705][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  570.424877][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  570.875279][  T154] device hsr_slave_0 left promiscuous mode
[  570.920953][  T154] device hsr_slave_1 left promiscuous mode
[  570.928843][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.990410][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.058290][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.075979][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.090362][  T154] device bridge_slave_1 left promiscuous mode
[  571.105948][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.125914][  T154] device bridge_slave_0 left promiscuous mode
[  571.143958][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.168022][  T154] device veth1_macvtap left promiscuous mode
[  571.185357][  T154] device veth0_macvtap left promiscuous mode
[  571.468497][  T154] device veth1_vlan left promiscuous mode
[  571.479658][  T154] device veth0_vlan left promiscuous mode
[  573.048489][  T154] bond1 (unregistering): Released all slaves
[  573.349282][  T154] team0 (unregistering): Port device team_slave_1 removed
[  573.368791][  T154] team0 (unregistering): Port device team_slave_0 removed
[  573.384111][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  573.418371][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  573.567146][  T154] bond0 (unregistering): Released all slaves
[  573.629003][ T9074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  573.644192][ T9074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  573.652999][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  573.662899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  575.036485][ T9294] loop5: detected capacity change from 0 to 1024
[  579.086318][ T9294] EXT4-fs: failed to create workqueue
[  579.143014][ T9294] EXT4-fs (loop5): mount failed
[  579.563508][ T9074] 8021q: adding VLAN 0 to HW filter on device batadv0
[  579.658342][ T7696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  579.856121][ T7696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  580.114002][ T9335] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  580.120578][ T9335] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  580.129697][ T9335] vhci_hcd vhci_hcd.0: Device attached
[  580.441138][ T1106] usb 34-1: SetAddress Request (2) to port 0
[  580.460529][ T1106] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  580.669163][ T9331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  580.681030][ T9336] vhci_hcd: connection reset by peer
[  580.720573][ T6639] vhci_hcd: stop threads
[  580.728141][ T6639] vhci_hcd: release socket
[  580.807541][ T6639] vhci_hcd: disconnect device
[  581.751201][ T4177] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  582.141126][ T4177] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  582.177628][ T4177] usb 7-1: config 0 has no interface number 0
[  582.441111][ T4177] usb 7-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  582.500020][ T4177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.642081][ T4177] usb 7-1: Product: syz
[  582.717986][ T4177] usb 7-1: Manufacturer: syz
[  582.797266][ T4177] usb 7-1: SerialNumber: syz
[  583.000880][ T4177] usb 7-1: config 0 descriptor??
[  583.220487][ T4177] usb 7-1: selecting invalid altsetting 1
[  583.372449][ T4177] dvb_ttusb_budget: ttusb_init_controller: error
[  583.458256][ T4177] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  584.697468][ T4177] DVB: Unable to find symbol stv0299_attach()
[  584.783225][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  584.800992][ T4177] DVB: Unable to find symbol tda8083_attach()
[  584.807144][ T4177] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  584.829130][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  584.933014][ T9361] loop3: detected capacity change from 0 to 256
[  584.940456][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  584.974063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  585.015607][ T9074] device veth0_vlan entered promiscuous mode
[  585.067601][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  585.249850][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  586.008650][ T1106] usb 34-1: device descriptor read/8, error -110
[  586.224515][ T9074] device veth1_vlan entered promiscuous mode
[  586.432539][ T1106] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  586.441127][ T1106] usb usb34-port1: attempt power cycle
[  586.460264][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  586.471928][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  586.550448][ T9074] device veth0_macvtap entered promiscuous mode
[  586.585123][ T9074] device veth1_macvtap entered promiscuous mode
[  586.801035][ T1106] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  586.819092][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.103027][ T1106] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  587.647757][ T1106] usb usb34-port1: unable to enumerate USB device
[  587.661249][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.686492][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  587.719203][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.743083][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.760408][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  587.783368][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  587.811637][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  587.851484][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  587.890470][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.905503][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.930999][ T9074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  587.967788][ T9074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  587.979557][ T9074] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.988820][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  588.001702][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  588.028808][ T9074] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  588.051828][ T9074] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  588.062008][ T9074] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  588.071155][ T9074] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  588.228152][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.255508][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.272376][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  588.377389][ T4322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.403232][ T4322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.426330][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  589.991956][ T4941] usb 7-1: USB disconnect, device number 6
[  591.003563][ T9397] Set syz1 is full, maxelem 65536 reached
[  592.888594][ T9415] loop7: detected capacity change from 0 to 1024
[  593.086164][ T9415] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  595.421765][ T9450] tipc: Cannot configure node identity twice
[  596.593014][ T9436] loop7: detected capacity change from 0 to 4096
[  600.126319][ T9468] virt_wifi0 speed is unknown, defaulting to 1000
[  602.273278][ T4608] Bluetooth: hci1: command 0x0409 tx timeout
[  603.963187][ T9493] comedi comedi3: rti800: I/O port conflict (0x4,16)
[  604.332445][ T1106] Bluetooth: hci1: command 0x041b tx timeout
[  604.796402][ T9468] chnl_net:caif_netlink_parms(): no params data found
[  607.106406][ T4231] Bluetooth: hci1: command 0x040f tx timeout
[  611.300130][ T1106] Bluetooth: hci1: command 0x0419 tx timeout
[  611.458579][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.467457][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.477015][ T9468] device bridge_slave_0 entered promiscuous mode
[  611.576280][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.585374][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.595167][ T9468] device bridge_slave_1 entered promiscuous mode
[  611.632783][ T9468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.773150][ T9468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.778344][ T9539] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1190'.
[  613.633387][ T9468] team0: Port device team_slave_0 added
[  613.787573][ T9468] team0: Port device team_slave_1 added
[  613.808779][ T9554] fuse: Bad value for 'fd'
[  613.865392][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.899999][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  614.168804][ T9468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  615.171759][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  615.178766][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  615.410975][ T9468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  615.956566][ T9468] device hsr_slave_0 entered promiscuous mode
[  616.009655][ T9468] device hsr_slave_1 entered promiscuous mode
[  616.076216][ T9468] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  616.139922][ T9468] Cannot create hsr debugfs directory
[  616.190856][ T1106] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  616.430934][ T1106] usb 8-1: Using ep0 maxpacket: 16
[  616.561035][ T1106] usb 8-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11
[  616.628404][ T1106] usb 8-1: config 0 interface 0 has no altsetting 0
[  616.648678][ T1106] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  616.689177][ T1106] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.731022][ T1106] usb 8-1: config 0 descriptor??
[  618.328421][ T9614] autofs4:pid:9614:autofs_fill_super: called with bogus options
[  619.427596][ T9620] fuse: Bad value for 'fd'
[  619.681076][ T1106] usbhid 8-1:0.0: can't add hid device: -71
[  619.687453][ T1106] usbhid: probe of 8-1:0.0 failed with error -71
[  619.698977][ T9468] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  619.731368][ T1106] usb 8-1: USB disconnect, device number 2
[  620.109647][  T154] tipc: Left network mode
[  620.115636][ T9468] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  620.765013][ T9468] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  620.872717][ T9468] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  622.727882][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1230'.
[  622.904505][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.922622][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  622.930642][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  622.987692][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  623.061348][ T9669] futex_wake_op: syz.3.1233 tries to shift op by 144; fix this program
[  623.101948][ T9669] overlayfs: failed to clone upperpath
[  623.160982][ T9468] 8021q: adding VLAN 0 to HW filter on device team0
[  623.903843][ T9668] loop7: detected capacity change from 0 to 164
[  624.227808][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  624.234256][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  624.308808][ T9668] iso9660: Corrupted directory entry in block 2 of inode 1792
[  624.611085][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  624.660656][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  624.754375][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state
[  624.761644][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  624.879300][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  624.912178][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  624.921818][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  624.930307][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state
[  624.937471][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state
[  624.987873][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  625.021445][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  625.038311][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  626.276883][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  626.428592][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  626.485184][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  626.494649][ T6652] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  626.527975][ T9468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  626.695270][ T9468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  626.761991][ T9698] Device name cannot be null; rc = [-22]
[  627.297130][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  628.242803][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  628.252269][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  628.262082][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  628.282390][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  631.228815][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  631.247729][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  632.144674][ T9468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.717610][  T154] device hsr_slave_0 left promiscuous mode
[  632.728620][  T154] device hsr_slave_1 left promiscuous mode
[  632.838244][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.936169][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  633.125520][  T154] device bridge_slave_1 left promiscuous mode
[  633.224824][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.428715][  T154] device bridge_slave_0 left promiscuous mode
[  633.477414][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.501229][  T154] team0 (unregistering): Port device macvlan2 removed
[  635.025914][  T154] team0 (unregistering): Port device team_slave_1 removed
[  636.117364][  T154] team0 (unregistering): Port device team_slave_0 removed
[  636.227581][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  636.377839][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  637.360491][  T154] bond0 (unregistering): Released all slaves
[  640.198837][ T9809] loop7: detected capacity change from 0 to 256
[  640.864943][ T9809] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  640.875805][ T9809] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  641.102906][ T9809] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d)
[  641.899551][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  641.929624][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  641.997393][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  642.012544][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  642.083067][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  642.101425][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  642.132059][ T9468] device veth0_vlan entered promiscuous mode
[  642.169815][ T9468] device veth1_vlan entered promiscuous mode
[  642.498454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  642.513526][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  642.528824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  642.661744][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  642.892618][ T9468] device veth0_macvtap entered promiscuous mode
[  642.935751][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  642.967780][ T9468] device veth1_macvtap entered promiscuous mode
[  643.035299][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  643.110418][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.120401][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  643.182749][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  643.205991][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'.
[  643.403351][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  644.846988][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.413696][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  645.554441][ T7696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  645.581512][ T7696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  645.629919][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  645.680487][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.728730][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  645.760236][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.800808][ T9468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  645.839175][ T9468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  645.881296][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  645.889155][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  645.903910][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  645.963451][ T9468] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  646.023146][ T9468] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  646.240421][ T9468] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.258172][ T9468] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.277966][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  647.290828][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  647.333287][ T9890] loop6: detected capacity change from 0 to 4096
[  647.357586][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  647.370318][ T9890] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  648.356301][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  648.364896][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  648.372523][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  652.033026][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1286'.
[  652.060322][ T9890] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  652.458031][ T9931] loop7: detected capacity change from 0 to 256
[  656.793389][ T6303] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22.
[  656.851771][ T6303] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22.
[  659.259961][T10010] loop6: detected capacity change from 0 to 4096
[  659.642340][T10010] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  666.972015][T10095] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  667.020789][T10091] loop7: detected capacity change from 0 to 40427
[  667.091513][T10091] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  667.099937][T10091] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  667.116157][T10091] F2FS-fs (loop7): invalid crc value
[  667.195368][T10091] F2FS-fs (loop7): Found nat_bits in checkpoint
[  667.260094][ T4609] Bluetooth: hci0: command 0x0406 tx timeout
[  667.295210][T10091] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  667.302821][T10091] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  667.502955][T10104] xt_l2tp: unknown flags: 17
[  667.827110][T10107] attempt to access beyond end of device
[  667.827110][T10107] loop7: rw=34817, want=77856, limit=40427
[  670.251502][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  671.442751][T10142] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  672.363165][T10148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  675.702860][T10193] netlink: 'syz.7.1346': attribute type 10 has an invalid length.
[  675.710923][T10193] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1346'.
[  676.093964][T10193] team0: Port device geneve0 added
[  679.164649][T10226] loop7: detected capacity change from 0 to 256
[  679.343576][T10226] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  679.688404][T10232] overlayfs: failed to clone upperpath
[  684.215669][T10306] netlink: 'syz.7.1372': attribute type 10 has an invalid length.
[  684.223750][T10306] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1372'.
[  685.839280][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  685.880663][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  686.089902][T10320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  686.199719][T10323] tipc: Cannot configure node identity twice
[  689.968762][T10368] loop7: detected capacity change from 0 to 256
[  690.157203][T10368] FAT-fs (loop7): bogus number of FAT sectors
[  690.191690][T10368] FAT-fs (loop7): Can't find a valid FAT filesystem
[  691.731959][T10383] loop7: detected capacity change from 0 to 32768
[  697.921101][T10466] loop7: detected capacity change from 0 to 512
[  697.995360][T10466] FAT-fs (loop7): bogus logical sector size 0
[  698.018701][T10466] FAT-fs (loop7): Can't find a valid FAT filesystem
[  698.999072][T10474] loop7: detected capacity change from 0 to 1024
[  699.901878][T10474] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  701.165720][T10515] loop6: detected capacity change from 0 to 128
[  702.105942][T10531] loop7: detected capacity change from 0 to 1024
[  702.242856][T10531] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  702.491862][T10515] vxfs: unable to set final block size
[  705.149205][T10585] loop7: detected capacity change from 0 to 1024
[  705.220859][ T4177] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  705.242711][T10585] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  705.461151][ T4177] usb 1-1: Using ep0 maxpacket: 32
[  705.580993][ T4177] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  705.597342][ T4177] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  705.700897][ T4177] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  705.713110][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  705.721519][ T4177] usb 1-1: SerialNumber: syz
[  705.761647][ T4177] hub 1-1:1.0: bad descriptor, ignoring hub
[  705.767951][ T4177] hub: probe of 1-1:1.0 failed with error -5
[  705.775972][ T4177] cdc_acm 1-1:1.0: skipping garbage
[  705.781678][ T4177] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  705.789741][ T4177] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  705.796883][ T4177] cdc_acm: probe of 1-1:1.0 failed with error -22
[  705.848648][T10609] loop6: detected capacity change from 0 to 256
[  706.846607][T10626] loop7: detected capacity change from 0 to 16
[  706.924996][T10626] erofs: (device loop7): mounted with root inode @ nid 36.
[  707.018719][ T4942] usb 1-1: USB disconnect, device number 9
[  707.910103][T10649] loop7: detected capacity change from 0 to 136
[  708.329230][T10662] loop7: detected capacity change from 0 to 1024
[  708.558741][T10662] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  708.605866][  T150] block nbd0: Attempted send on invalid socket
[  708.612859][  T150] blk_update_request: I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  708.624638][T10679] EXT4-fs (nbd0): unable to read superblock
[  708.657072][T10680] loop6: detected capacity change from 0 to 16
[  708.799185][T10680] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  708.834330][T10680] erofs: DAX unsupported by block device. Turning off DAX.
[  709.084803][T10680] erofs: (device loop6): mounted with root inode @ nid 36.
[  710.585779][T10717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1481'.
[  710.783233][ T4942] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  711.641545][ T4942] usb 7-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  711.665117][ T4942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.680876][ T4177] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  711.694746][T10737] 8021q: VLANs not supported on lo
[  711.823680][ T4942] pwc: Logitech/Cisco VT Camera webcam detected.
[  712.820825][ T4177] usb 8-1: Using ep0 maxpacket: 32
[  712.981051][ T4177] usb 8-1: unable to get BOS descriptor or descriptor too short
[  713.081076][ T4177] usb 8-1: config 8 has an invalid interface number: 94 but max is 0
[  713.131490][ T4942] pwc: send_video_command error -71
[  713.137043][ T4942] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  713.145236][ T4942] Philips webcam: probe of 7-1:127.0 failed with error -71
[  713.160997][ T4942] usb 7-1: USB disconnect, device number 7
[  713.187522][ T4177] usb 8-1: config 8 has no interface number 0
[  713.372647][ T4177] usb 8-1: config 8 interface 94 has no altsetting 0
[  714.140983][ T4177] usb 8-1: string descriptor 0 read error: -71
[  714.147327][ T4177] usb 8-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=fc.62
[  714.187951][ T4177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.395548][ T4177] usb 8-1: can't set config #8, error -71
[  714.452064][ T4177] usb 8-1: USB disconnect, device number 3
[  715.800984][ T4177] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  716.050856][ T4177] usb 8-1: Using ep0 maxpacket: 8
[  716.550868][ T4177] usb 8-1: unable to get BOS descriptor or descriptor too short
[  716.630910][ T4177] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2007, setting to 1024
[  716.801176][ T4177] usb 8-1: New USB device found, idVendor=0499, idProduct=1718, bcdDevice= 0.40
[  716.818914][ T4177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.845922][ T4177] usb 8-1: Product: syz
[  716.860292][ T4177] usb 8-1: Manufacturer: syz
[  716.875115][ T4177] usb 8-1: SerialNumber: syz
[  717.251111][ T4177] usb 8-1: 1:1 : no cluster descriptor
[  717.270956][ T4177] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  717.373648][ T4177] usb 8-1: USB disconnect, device number 4
[  717.722996][ T9895] udevd[9895]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  719.234420][T10889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1522'.
[  719.362447][T10868] loop7: detected capacity change from 0 to 32768
[  719.525324][ T4264] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  719.539540][T10868] XFS (loop7): Mounting V5 Filesystem
[  719.594221][T10868] XFS (loop7): Ending clean mount
[  719.619830][T10868] XFS (loop7): Quotacheck needed: Please wait.
[  719.701255][T10868] XFS (loop7): Quotacheck: Done.
[  719.780976][ T4264] usb 1-1: Using ep0 maxpacket: 32
[  719.859662][ T9074] XFS (loop7): Unmounting Filesystem
[  719.937548][ T4264] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  719.958002][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  719.989913][ T4264] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  720.028940][ T4264] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  721.001528][ T4264] usb 1-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice= 0.40
[  721.109065][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.123095][ T4264] usb 1-1: Product: syz
[  721.127341][ T4264] usb 1-1: Manufacturer: syz
[  721.132787][ T4264] usb 1-1: SerialNumber: syz
[  722.473948][T10969] loop7: detected capacity change from 0 to 1024
[  722.547290][ T4264] usb 1-1: USB disconnect, device number 10
[  722.587258][T10969] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  723.732998][ T4177] Bluetooth: hci1: command 0x0406 tx timeout
[  724.050859][ T4177] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  724.310966][ T4177] usb 7-1: Using ep0 maxpacket: 32
[  724.396135][ T9800] udevd[9800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  724.510975][ T4177] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.531260][ T4177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  724.558101][ T4177] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  724.746109][ T4177] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  725.711073][ T4177] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  725.749636][T11031] loop7: detected capacity change from 0 to 1024
[  725.756441][ T4177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  725.779866][ T4177] usb 7-1: Product: syz
[  725.814595][ T4177] usb 7-1: config 0 descriptor??
[  725.851390][ T4177] usb 7-1: can't set config #0, error -71
[  725.874550][ T4177] usb 7-1: USB disconnect, device number 8
[  725.979064][T11031] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  729.904854][T11123] netlink: zone id is out of range
[  729.910051][T11123] netlink: zone id is out of range
[  729.935989][T11123] netlink: zone id is out of range
[  729.953230][T11123] netlink: zone id is out of range
[  729.979101][T11123] netlink: zone id is out of range
[  730.014426][T11123] netlink: zone id is out of range
[  730.037934][T11123] netlink: del zone limit has 4 unknown bytes
[  731.443792][T11152] loop7: detected capacity change from 0 to 256
[  731.726759][T11162] netlink: 'syz.3.1585': attribute type 10 has an invalid length.
[  731.734883][T11162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1585'.
[  731.772220][T11162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.781484][T11162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.790509][T11162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  731.799669][T11162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  733.176927][T11176] loop7: detected capacity change from 0 to 4096
[  733.358494][T11176] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  735.935692][T11217] misc userio: The device must be registered before sending interrupts
[  738.697754][T11230] loop7: detected capacity change from 0 to 256
[  738.848735][T11230] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  739.527220][T11230] attempt to access beyond end of device
[  739.527220][T11230] loop7: rw=0, want=34225520825, limit=256
[  740.212214][T11249] loop7: detected capacity change from 0 to 1024
[  741.716464][T11244] hfsplus: invalid file type 0174377 for inode 21
[  741.969311][T11246] overlayfs: failed to clone upperpath
[  743.686522][T11275] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1614'.
[  744.104793][T11285] loop7: detected capacity change from 0 to 40427
[  744.196710][T11285] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  744.204645][T11285] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  744.291753][T11285] F2FS-fs (loop7): invalid crc value
[  744.463908][T11285] F2FS-fs (loop7): Found nat_bits in checkpoint
[  744.524579][T11285] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  744.531814][T11285] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  747.087336][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  747.093762][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  747.199089][T11329] loop6: detected capacity change from 0 to 8
[  747.228659][T11329] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  747.409706][T11354] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1630'.
[  747.633287][T11329] cramfs: unsupported filesystem features
[  748.953038][T11372] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  751.177635][ T4264] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  752.005516][T11414] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  754.370742][ T4177] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  754.761023][ T4264] usb 1-1: unable to read config index 0 descriptor/all
[  754.768325][ T4264] usb 1-1: can't read configurations, error -71
[  755.832622][ T4177] usb 7-1: device descriptor read/all, error -71
[  756.058216][T11450] SET target dimension over the limit!
[  756.822833][T11453] tipc: Started in network mode
[  756.827877][T11453] tipc: Node identity 4, cluster identity 4711
[  756.834173][T11453] tipc: Node number set to 4
[  759.470318][T11458] loop7: detected capacity change from 0 to 32768
[  759.497150][T11458] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.1665 (11458)
[  759.624649][T11458] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  759.844910][T11458] BTRFS info (device loop7): force zlib compression, level 3
[  760.016267][T11458] BTRFS info (device loop7): turning on flush-on-commit
[  760.145050][T11458] BTRFS info (device loop7): max_inline at 4096
[  760.252530][T11458] BTRFS info (device loop7): using free space tree
[  760.377900][T11458] BTRFS info (device loop7): has skinny extents
[  761.770228][T11458] BTRFS error (device loop7): open_ctree failed: -12
[  762.978655][T11540] loop6: detected capacity change from 0 to 16
[  763.039533][T11540] erofs: Unknown parameter 'ãé'
[  765.772940][T11563] netlink: 'syz.8.1683': attribute type 10 has an invalid length.
[  765.780884][T11563] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1683'.
[  765.802478][T11563] team0: Port device geneve0 added
[  765.882313][T11543] loop7: detected capacity change from 0 to 32768
[  765.899802][T11543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1679 (11543)
[  766.811897][T11543] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  766.940935][T11543] BTRFS info (device loop7): using free space tree
[  766.947505][T11543] BTRFS info (device loop7): has skinny extents
[  768.321088][T11543] BTRFS error (device loop7): open_ctree failed: -12
[  769.521601][T11618] netlink: 'syz.0.1698': attribute type 10 has an invalid length.
[  769.529561][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1698'.
[  769.725219][T11625] netlink: 'syz.6.1699': attribute type 10 has an invalid length.
[  769.733306][T11625] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1699'.
[  769.758188][T11625] team0: Port device geneve0 added
[  771.843874][T11645] loop7: detected capacity change from 0 to 2048
[  772.891673][T11645] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none.
[  773.867938][T11667] netlink: 'syz.7.1710': attribute type 10 has an invalid length.
[  773.876010][T11667] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1710'.
[  774.093602][T11674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  774.117116][T11678] loop7: detected capacity change from 0 to 256
[  774.124807][T11674] device batadv_slave_0 entered promiscuous mode
[  774.159875][T11674] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  776.009960][T11692] loop7: detected capacity change from 0 to 256
[  776.475526][T11692] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  776.486883][T11692] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  776.513258][T11692] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  777.632905][T11705] netlink: 'syz.3.1726': attribute type 10 has an invalid length.
[  777.640825][T11705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1726'.
[  777.882820][T11714] --map-set only usable from mangle table
[  779.874663][T11748] netlink: 'syz.7.1739': attribute type 10 has an invalid length.
[  779.882753][T11748] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1739'.
[  781.827118][T11786] netlink: 'syz.8.1752': attribute type 10 has an invalid length.
[  781.835054][T11786] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1752'.
[  786.800475][T11820] loop6: detected capacity change from 0 to 64
[  786.884451][T11825] x_tables: unsorted entry at hook 2
[  786.999388][T11829] loop7: detected capacity change from 0 to 1024
[  787.230467][T11829] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  790.114223][ T1106] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  790.371509][ T1106] usb 8-1: Using ep0 maxpacket: 32
[  790.491799][ T1106] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[  790.512060][ T1106] usb 8-1: config 0 has no interface number 0
[  790.550926][ T4608] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  790.590363][ T1106] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  790.688003][ T1106] usb 8-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  790.782142][ T1106] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  790.875751][ T1106] usb 8-1: config 0 interface 196 has no altsetting 0
[  790.941044][ T4608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  790.972740][ T4608] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  791.002582][ T4608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.087477][ T4608] usb 1-1: config 0 descriptor??
[  791.093896][ T1106] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  791.109543][ T1106] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.118203][ T1106] usb 8-1: Product: syz
[  791.123236][ T1106] usb 8-1: Manufacturer: syz
[  791.127884][ T1106] usb 8-1: SerialNumber: syz
[  791.145729][ T1106] usb 8-1: config 0 descriptor??
[  791.171015][T11902] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  791.192487][T11923] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1800'.
[  791.236943][T11600] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  791.350834][ T4608] ath6kl: Failed to submit usb control message: -71
[  791.357792][ T4608] ath6kl: unable to send the bmi data to the device: -71
[  791.369786][ T4608] ath6kl: Unable to send get target info: -71
[  791.630828][ T1106] ipheth 8-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  791.653840][T11600] usb 7-1: config 0 has an invalid interface number: 11 but max is 0
[  791.658790][ T1106] ipheth: probe of 8-1:0.196 failed with error -22
[  791.668972][T11600] usb 7-1: config 0 has no interface number 0
[  791.669018][T11600] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  791.669047][T11600] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 97, changing to 7
[  791.669093][T11600] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 24929, setting to 1024
[  791.669123][T11600] usb 7-1: config 0 interface 11 has no altsetting 0
[  791.669154][T11600] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  791.669179][T11600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.706953][T11600] usb 7-1: config 0 descriptor??
[  791.822797][T11600] keyspan 7-1:0.11: Keyspan 2 port adapter converter detected
[  791.837699][T11600] keyspan 7-1:0.11: unsupported endpoint type 1
[  791.846353][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81
[  791.865759][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82
[  791.877306][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1
[  791.891490][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2
[  791.899227][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 85
[  791.914433][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 5
[  791.936356][T11600] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  791.951049][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83
[  791.959014][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84
[  791.974768][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3
[  791.985945][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4
[  791.997369][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 86
[  792.009223][T11600] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 6
[  792.022089][T11600] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  792.090981][T11600] usb 8-1: USB disconnect, device number 5
[  792.142220][T11537] usb 7-1: USB disconnect, device number 11
[  792.164933][T11537] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  792.183300][T11537] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  792.197373][T11537] keyspan 7-1:0.11: device disconnected
[  792.740160][T11949] capability: warning: `syz.7.1810' uses deprecated v2 capabilities in a way that may be insecure
[  794.229022][T11983] NILFS (nullb0): couldn't find nilfs on the device
[  794.481653][T11996] loop6: detected capacity change from 0 to 512
[  794.568035][T11996] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  795.345383][T12024] loop7: detected capacity change from 0 to 1024
[  795.683886][T12024] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  797.315202][ T1106] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  797.731424][ T1106] usb 7-1: Using ep0 maxpacket: 16
[  797.850931][ T1106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  797.882404][ T1106] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  797.910514][ T1106] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  797.924473][ T1106] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  797.933833][ T1106] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.980121][ T1106] usb 7-1: config 0 descriptor??
[  799.077541][T12095] tipc: Started in network mode
[  799.082629][T12095] tipc: Node identity 4, cluster identity 4711
[  799.088860][T12095] tipc: Node number set to 4
[  800.871017][ T1106] usbhid 7-1:0.0: can't add hid device: -71
[  800.877039][ T1106] usbhid: probe of 7-1:0.0 failed with error -71
[  800.884136][ T4177] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  800.910220][ T1106] usb 7-1: USB disconnect, device number 12
[  802.300797][ T4177] usb 8-1: unable to read config index 0 descriptor/all
[  802.307822][ T4177] usb 8-1: can't read configurations, error -71
[  802.710999][ T4177] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  803.300989][ T4177] usb 8-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  803.310058][ T4177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.322552][ T4177] usb 8-1: Product: syz
[  803.326755][ T4177] usb 8-1: Manufacturer: syz
[  803.333606][ T4177] usb 8-1: SerialNumber: syz
[  803.340398][ T4177] usb 8-1: config 0 descriptor??
[  803.386921][ T4177] usb 8-1: selecting invalid altsetting 3
[  803.393221][ T4177] comedi comedi4: could not set alternate setting 3 in high speed
[  803.401458][ T4177] usbdux 8-1:0.0: driver 'usbdux' failed to auto-configure device.
[  803.412207][ T4177] usbdux: probe of 8-1:0.0 failed with error -22
[  803.588232][ T4177] usb 8-1: USB disconnect, device number 7
[  804.140966][ T4177] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  804.380813][ T4177] usb 8-1: Using ep0 maxpacket: 8
[  804.660978][ T4177] usb 8-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  804.670054][ T4177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.678868][ T4177] usb 8-1: Product: syz
[  804.683126][ T4177] usb 8-1: Manufacturer: syz
[  804.687752][ T4177] usb 8-1: SerialNumber: syz
[  804.696884][ T4177] usb 8-1: config 0 descriptor??
[  804.747089][ T4177] usb 8-1: selecting invalid altsetting 3
[  804.753098][ T4177] comedi comedi4: could not set alternate setting 3 in high speed
[  804.761289][ T4177] usbdux 8-1:0.0: driver 'usbdux' failed to auto-configure device.
[  804.771383][ T4177] usbdux: probe of 8-1:0.0 failed with error -22
[  804.944498][ T4177] usb 8-1: USB disconnect, device number 8
[  808.494529][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  808.500888][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  810.744568][T12145] loop7: detected capacity change from 0 to 256
[  810.823630][T12145] FAT-fs (loop7): Directory bread(block 64) failed
[  810.830210][T12145] FAT-fs (loop7): Directory bread(block 65) failed
[  810.859269][T12145] FAT-fs (loop7): Directory bread(block 66) failed
[  810.879429][T12145] FAT-fs (loop7): Directory bread(block 67) failed
[  810.889196][T12145] FAT-fs (loop7): Directory bread(block 68) failed
[  810.913165][T12145] FAT-fs (loop7): Directory bread(block 69) failed
[  810.936306][T12145] FAT-fs (loop7): Directory bread(block 70) failed
[  810.969356][T12145] FAT-fs (loop7): Directory bread(block 71) failed
[  810.986554][T12145] FAT-fs (loop7): Directory bread(block 72) failed
[  811.084557][T12145] FAT-fs (loop7): Directory bread(block 73) failed
[  811.899388][T12154] virt_wifi0 speed is unknown, defaulting to 1000
[  812.137477][T12154] chnl_net:caif_netlink_parms(): no params data found
[  812.282255][T12154] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.300352][T12154] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.318705][T12154] device bridge_slave_0 entered promiscuous mode
[  812.329119][T12154] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.346923][T12154] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.367210][T12154] device bridge_slave_1 entered promiscuous mode
[  812.409665][T12154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.433149][T12154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  812.467177][T12160] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  812.496020][T12154] team0: Port device team_slave_0 added
[  812.513680][T12154] team0: Port device team_slave_1 added
[  812.553025][T12154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  812.587351][T12154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  812.614961][T12154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  812.627539][T12154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  812.634739][T12154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  812.663341][T12154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  812.748768][T12154] device hsr_slave_0 entered promiscuous mode
[  812.756052][T12154] device hsr_slave_1 entered promiscuous mode
[  812.768330][T12154] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  812.776685][T12154] Cannot create hsr debugfs directory
[  812.851952][T12160] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  812.877069][T12160] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3
[  812.904476][T12160] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  812.916915][T12160] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.957712][T12160] usb 8-1: config 0 descriptor??
[  812.988156][T12154] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  812.998375][T12154] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  813.008907][T12154] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  813.018970][T12154] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  813.045257][T12154] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.052388][T12154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  813.059724][T12154] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.066900][T12154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  813.088123][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state
[  813.104639][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.140851][T11598] Bluetooth: hci5: command 0x0409 tx timeout
[  813.249974][T12154] 8021q: adding VLAN 0 to HW filter on device bond0
[  813.266849][T12154] 8021q: adding VLAN 0 to HW filter on device team0
[  813.284586][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  813.293150][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  813.302729][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  813.322282][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  813.339527][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  813.346667][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  813.367078][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  813.380987][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  813.389711][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  813.396844][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  813.431134][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  813.458922][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  813.467040][T12160] Bluetooth: Can't get state to change to load configuration err
[  813.475694][T12160] Bluetooth: Loading sysconfig file failed
[  813.483580][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  813.497786][T12160] ath3k: probe of 8-1:0.0 failed with error -16
[  813.509147][T12160] usb 8-1: USB disconnect, device number 9
[  813.536623][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  813.567719][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  813.577189][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  813.587578][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  813.597044][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  813.605914][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  813.619097][T12154] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  813.631640][T12154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  813.640620][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  813.649933][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  813.754050][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  813.761959][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  813.777925][T12154] 8021q: adding VLAN 0 to HW filter on device batadv0
[  813.900887][T11598] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  813.923927][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  813.934072][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  813.956129][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  813.964646][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  813.975907][T12154] device veth0_vlan entered promiscuous mode
[  813.985891][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  813.996843][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  814.009875][T12154] device veth1_vlan entered promiscuous mode
[  814.054989][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  814.128981][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  814.147754][T11598] usb 7-1: Using ep0 maxpacket: 8
[  814.166901][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  814.186187][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  814.200054][T12154] device veth0_macvtap entered promiscuous mode
[  814.217609][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  814.239179][T12154] device veth1_macvtap entered promiscuous mode
[  814.266619][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.277516][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.287563][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.298952][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.301175][T11598] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  814.308893][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  814.330316][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.340392][T11598] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  814.345214][T12154] batman_adv: batadv0: Interface activated: batadv_slave_0
[  814.360744][T11598] usb 7-1: config 0 interface 0 has no altsetting 0
[  814.367639][T11598] usb 7-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00
[  814.377374][T11598] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.391118][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  814.404933][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  814.413155][T11598] usb 7-1: config 0 descriptor??
[  814.423342][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.434081][ T1106] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  814.436938][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.452115][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.462769][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.474498][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.485051][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.495754][T12154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  814.506846][T12154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  814.517859][T12154] batman_adv: batadv0: Interface activated: batadv_slave_1
[  814.528965][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  814.542238][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  814.555932][T12154] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  814.565125][T12154] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  814.574157][T12154] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  814.583712][T12154] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  814.645087][ T7695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.658281][ T7695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.674856][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  814.686261][ T6639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  814.694234][ T1106] usb 8-1: Using ep0 maxpacket: 16
[  814.703259][ T6639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  814.713189][ T7695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  814.914615][T12244] tipc: Started in network mode
[  814.919635][T12244] tipc: Node identity 4, cluster identity 4711
[  814.925984][T12244] tipc: Node number set to 4
[  815.691001][ T1106] usb 8-1: unable to get BOS descriptor or descriptor too short
[  815.702751][T11537] Bluetooth: hci5: command 0x041b tx timeout
[  815.724441][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0xd
[  815.750143][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0x0
[  815.779800][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0x0
[  815.801039][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0x0
[  815.808047][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0x0
[  815.838195][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0x0
[  815.851045][ T1106] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  815.858116][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0x0
[  815.880300][T11598] saitek 0003:06A3:0CCB.0002: unknown main item tag 0x0
[  815.918991][T11598] saitek 0003:06A3:0CCB.0002: hidraw0: USB HID v0.02 Device [HID 06a3:0ccb] on usb-dummy_hcd.6-1/input0
[  816.034154][ T1106] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  816.058645][ T1106] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.077754][ T1106] usb 8-1: Product: syz
[  816.085283][ T1106] usb 8-1: Manufacturer: syz
[  816.089976][ T1106] usb 8-1: SerialNumber: syz
[  816.150792][ T4609] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  816.189186][ T4604] usb 7-1: USB disconnect, device number 13
[  816.363796][ T1106] usb 8-1: Audio class v2/v3 interfaces need an interface association
[  816.373937][ T1106] snd-usb-audio: probe of 8-1:1.0 failed with error -22
[  816.516611][ T4609] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  816.528587][ T4609] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  816.745846][ T4609] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  816.756110][ T4609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  816.764378][ T4609] usb 10-1: SerialNumber: syz
[  816.820448][ T1106] usb 8-1: USB disconnect, device number 10
[  817.053452][ T4609] usb 10-1: 0:2 : does not exist
[  817.112857][T11806] udevd[11806]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  817.141155][ T4609] usb 10-1: USB disconnect, device number 2
[  817.411911][T12269] udevd[12269]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  818.017897][T11598] Bluetooth: hci5: command 0x040f tx timeout
[  818.498571][T12279] loop9: detected capacity change from 0 to 512
[  818.655868][T12279] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  818.674181][T12279] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  818.706177][T12279] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  818.719005][T12279] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  818.728122][T12279] System zones: 0-2, 18-18, 34-35
[  818.762594][T12279] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  818.870541][T12279] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: none.
[  818.942399][T12289] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  818.971712][T12289] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  818.988922][T12289] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: none.
[  820.731509][T11598] Bluetooth: hci5: command 0x0419 tx timeout
[  821.007426][T12306] batman_adv: batadv0: Adding interface: macvtap1
[  821.024885][T12306] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  821.057327][T12306] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  821.079949][T12308] loop6: detected capacity change from 0 to 64
[  822.854420][T12338] loop7: detected capacity change from 0 to 1024
[  822.989200][T12338] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  823.063810][T12336] loop9: detected capacity change from 0 to 32768
[  823.096045][T12336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.1943 (12336)
[  823.216336][T12336] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[  823.255697][T12336] BTRFS info (device loop9): allowing degraded mounts
[  823.270678][T12336] BTRFS info (device loop9): turning on flush-on-commit
[  823.277744][T12336] BTRFS info (device loop9): max_inline at 0
[  823.318620][T12336] BTRFS info (device loop9): setting nodatasum
[  823.350884][T12336] BTRFS info (device loop9): turning on sync discard
[  823.357612][T12336] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  823.422591][T12336] BTRFS info (device loop9): trying to use backup root at mount time
[  823.458479][T12336] BTRFS info (device loop9): using free space tree
[  823.485140][T12336] BTRFS info (device loop9): has skinny extents
[  823.649193][T12364] loop6: detected capacity change from 0 to 64
[  823.681106][T12336] BTRFS info (device loop9): enabling ssd optimizations
[  825.704594][T12395] loop7: detected capacity change from 0 to 16
[  825.755917][T12395] erofs: (device loop7): mounted with root inode @ nid 36.
[  826.050766][T12398] loop7: detected capacity change from 0 to 128
[  826.158486][T12398] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  826.301252][T12398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  826.466862][T12398] overlayfs: upper fs needs to support d_type.
[  826.486802][T12398] overlayfs: upper fs does not support tmpfile.
[  828.710745][ T4609] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  829.080962][ T4609] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  829.131050][ T4609] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.151888][ T4609] usb 8-1: config 0 descriptor??
[  829.348927][T12459] loop9: detected capacity change from 0 to 32768
[  829.407030][T12444] batman_adv: batadv0: Adding interface: macvtap1
[  829.428386][T12444] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  829.495716][T12444] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  829.754458][T12459] XFS (loop9): Mounting V5 Filesystem
[  829.920814][T12459] XFS (loop9): Ending clean mount
[  829.967306][T12450] batman_adv: batadv0: Removing interface: macvtap1
[  830.689335][T12154] XFS (loop9): Unmounting Filesystem
[  831.387693][ T4609] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  831.412197][ T4609] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  831.479871][ T4609] [drm:udl_init] *ERROR* Selecting channel failed
[  831.565931][ T4609] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2
[  831.590299][ T4609] [drm] Initialized udl on minor 2
[  831.636384][ T4609] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  831.655092][ T4609] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  831.699318][ T4609] usb 8-1: USB disconnect, device number 11
[  831.862842][T12160] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  831.903721][T12160] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  831.953768][T12160] udl 8-1:0.0: [drm] Cannot find any crtc or sizes
[  832.088323][T12496] loop7: detected capacity change from 0 to 512
[  832.306241][T12496] EXT4-fs (loop7): Test dummy encryption mode enabled
[  832.317554][T12496] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  832.351465][T12496] EXT4-fs error (device loop7): ext4_orphan_get:1432: comm syz.7.1989: bad orphan inode 131083
[  832.363961][T12496] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none.
[  832.666197][T12511] loop7: detected capacity change from 0 to 128
[  833.185771][T12519] loop7: detected capacity change from 0 to 1024
[  833.481371][T12519] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  833.561964][T12499] loop9: detected capacity change from 0 to 40427
[  833.616327][T12499] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  833.671108][T12499] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  833.925086][T12499] F2FS-fs (loop9): build fault injection attr: rate: 17008, type: 0x1ffff
[  833.991298][T12499] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x1f8
[  834.171235][T12499] F2FS-fs (loop9): invalid crc value
[  834.292014][T12499] F2FS-fs (loop9): Found nat_bits in checkpoint
[  834.329798][T12550] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2004'.
[  834.504604][T12499] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  834.520725][T12499] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  834.632620][T12499] attempt to access beyond end of device
[  834.632620][T12499] loop9: rw=0, want=45072, limit=40427
[  834.844051][ T5669] attempt to access beyond end of device
[  834.844051][ T5669] loop9: rw=2049, want=40968, limit=40427
[  835.539524][T12581] loop6: detected capacity change from 0 to 1024
[  835.597805][T12581] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  836.465127][ T4609] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  836.932498][T12593] loop7: detected capacity change from 0 to 32768
[  837.005109][ T4609] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  837.015411][ T4609] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  837.025478][ T4609] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  837.890964][ T4609] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  837.925635][ T4609] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  837.944455][ T4609] usb 10-1: Product: syz
[  837.948763][ T4609] usb 10-1: Manufacturer: syz
[  837.965856][ T4609] usb 10-1: SerialNumber: syz
[  838.284091][ T4609] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  838.713362][T12631] netlink: 'syz.6.2022': attribute type 10 has an invalid length.
[  838.721511][T12631] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2022'.
[  839.028504][ T4609] usb 10-1: USB disconnect, device number 3
[  839.056250][ T4609] usblp0: removed
[  839.893010][T12657] loop6: detected capacity change from 0 to 64
[  840.893772][ T1106] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  841.010452][T12671] netlink: 'syz.3.2048': attribute type 10 has an invalid length.
[  841.018456][T12671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2048'.
[  841.830708][ T1106] usb 10-1: Using ep0 maxpacket: 16
[  841.955698][ T1106] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  841.976394][ T1106] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  842.024170][T12673] loop7: detected capacity change from 0 to 32768
[  842.152801][ T1106] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  842.162589][ T1106] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.181383][ T1106] usb 10-1: Product: syz
[  842.198324][ T1106] usb 10-1: Manufacturer: syz
[  842.223293][ T1106] usb 10-1: SerialNumber: syz
[  842.259793][T12673] JBD2: Ignoring recovery information on journal
[  842.345683][T12673] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  842.397390][T12686] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  842.550924][ T1106] usb 10-1: 0:2 : does not exist
[  842.562470][ T9074] ocfs2: Unmounting device (7,7) on (node local)
[  842.596592][ T1106] usb 10-1: USB disconnect, device number 4
[  842.692918][T12269] udevd[12269]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  843.062396][T12709] netlink: 'syz.3.2063': attribute type 10 has an invalid length.
[  843.070736][T12709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'.
[  844.804581][   T26] audit: type=1326 audit(1783066622.962:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12722 comm="syz.9.2070" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c8446e59 code=0x7fc00000
[  844.911331][T12684] loop6: detected capacity change from 0 to 32768
[  845.091175][T12737] loop9: detected capacity change from 0 to 2048
[  845.160342][T12737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  845.370215][T12684] 
[  845.370215][T12684]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  845.370215][T12684] 
[  845.406947][ T6303] 
[  845.406947][ T6303]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  845.406947][ T6303] 
[  845.511137][ T6303] 
[  845.511137][ T6303]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  845.511137][ T6303] 
[  845.626428][T12750] netlink: 'syz.8.2077': attribute type 10 has an invalid length.
[  845.634868][T12750] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2077'.
[  846.282167][T12753] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  847.264699][T12736] loop7: detected capacity change from 0 to 32768
[  847.478900][T12781] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  847.486943][T12781] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  847.584259][ T4941] kernel write not supported for file /input/mice (pid: 4941 comm: kworker/1:10)
[  847.597128][T12736] XFS (loop7): Mounting V5 Filesystem
[  847.820799][ T1106] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  847.852060][T12736] XFS (loop7): Ending clean mount
[  847.896087][T12736] XFS (loop7): Quotacheck needed: Please wait.
[  847.917557][T12800] netlink: 'syz.8.2094': attribute type 10 has an invalid length.
[  847.925608][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2094'.
[  848.665216][T12736] XFS (loop7): Quotacheck: Done.
[  848.710869][ T1106] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  848.753764][ T1106] usb 7-1: config 1 interface 0 altsetting 110 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  848.783280][ T1106] usb 7-1: config 1 interface 0 has no altsetting 0
[  848.805011][ T9074] XFS (loop7): Unmounting Filesystem
[  848.926789][T12798] loop9: detected capacity change from 0 to 32768
[  848.994043][ T1106] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  849.021769][ T1106] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.029816][ T1106] usb 7-1: Product: syz
[  849.045618][ T1106] usb 7-1: Manufacturer: syz
[  849.050271][ T1106] usb 7-1: SerialNumber: syz
[  849.354734][T12798] XFS (loop9): Mounting V5 Filesystem
[  849.682904][T12798] XFS (loop9): Ending clean mount
[  849.779274][T12154] XFS (loop9): Unmounting Filesystem
[  850.021971][ T1106] cdc_ether 7-1:1.0: skipping garbage
[  850.027413][ T1106] cdc_ether 7-1:1.0: skipping garbage
[  850.059886][ T1106] cdc_ether 7-1:1.0: skipping garbage
[  850.065881][ T1106] cdc_ether 7-1:1.0: invalid descriptor buffer length
[  850.080994][ T1106] usb 7-1: bad CDC descriptors
[  850.131720][ T1106] usb 7-1: USB disconnect, device number 14
[  851.226498][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2114'.
[  851.431852][T12862] loop9: detected capacity change from 0 to 512
[  851.500616][T12862] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option
[  851.569005][T12862] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 1024: comm syz.9.2104: invalid block
[  851.663522][T12862] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.2104: invalid indirect mapped block 1024 (level 0)
[  851.726923][T12862] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2104: bg 0: block 35: padding at end of block bitmap is not set
[  851.774648][T12862] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  851.794532][T12862] EXT4-fs (loop9): 1 truncate cleaned up
[  851.800237][T12862] EXT4-fs (loop9): mounted filesystem without journal. Opts: nomblk_io_submit,nombcache,bsddf,,errors=continue. Quota mode: none.
[  851.959417][T12848] loop7: detected capacity change from 0 to 32768
[  852.058208][T12848] XFS (loop7): Mounting V5 Filesystem
[  852.267678][T12848] XFS (loop7): Ending clean mount
[  852.455410][ T9074] XFS (loop7): Unmounting Filesystem
[  855.524544][T12942] loop6: detected capacity change from 0 to 1024
[  855.559058][T12945] loop7: detected capacity change from 0 to 512
[  855.872893][T12952] loop7: detected capacity change from 0 to 256
[  855.904905][T12952] exfat: Deprecated parameter 'utf8'
[  855.952410][T12952] exfat: Deprecated parameter 'utf8'
[  855.973310][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2146'.
[  856.011114][T12952] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  856.054005][T12938] loop9: detected capacity change from 0 to 32768
[  856.279192][T12938] 
[  856.279192][T12938]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  856.279192][T12938] 
[  856.403739][T12154] 
[  856.403739][T12154]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  856.403739][T12154] 
[  856.447471][T12154] 
[  856.447471][T12154]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  856.447471][T12154] 
[  856.616708][T12942] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  856.809385][T12978] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2154'.
[  856.972897][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2156'.
[  858.052314][T13018] loop9: detected capacity change from 0 to 1024
[  858.077723][T13017] loop7: detected capacity change from 0 to 1024
[  858.135041][T13018] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  858.246579][T13017] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  862.881078][ T4604] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  863.245550][ T4604] usb 8-1: Using ep0 maxpacket: 8
[  863.302947][T13092] loop6: detected capacity change from 0 to 256
[  863.420823][ T4604] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  864.196202][ T4604] usb 8-1: config 179 has no interface number 0
[  864.203095][ T4604] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  864.214715][ T4604] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  864.226463][ T4604] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  864.238349][ T4604] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  864.250258][ T4604] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  864.264097][ T4604] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  864.274317][ T4604] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.300994][T13083] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  865.776686][ T4604] usb 8-1: USB disconnect, device number 12
[  865.800688][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  865.815994][T12160] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input9
[  865.841034][ T4604] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  865.987894][T13123] netlink: 'syz.7.2209': attribute type 1 has an invalid length.
[  867.089931][T13137] /dev/loop0: Can't open blockdev
[  867.298688][T13146] loop9: detected capacity change from 0 to 1024
[  867.332775][T13143] loop7: detected capacity change from 0 to 2048
[  867.380230][T13146] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  867.523634][T13143] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  867.597438][T13143] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  867.629918][T13092] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  868.212268][T13143] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  868.260312][T13143] EXT4-fs (loop7): This should not happen!! Data will be lost
[  868.260312][T13143] 
[  868.298808][T13143] EXT4-fs (loop7): Total free blocks count 0
[  868.305201][T13143] EXT4-fs (loop7): Free/Dirty block details
[  868.338424][T13143] EXT4-fs (loop7): free_blocks=4096
[  868.389896][T13143] EXT4-fs (loop7): dirty_blocks=80
[  868.399954][T13143] EXT4-fs (loop7): Block reservation details
[  868.451276][T13143] EXT4-fs (loop7): i_reserved_data_blocks=5
[  868.498747][ T4307] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  868.520823][ T4307] EXT4-fs (loop7): This should not happen!! Data will be lost
[  868.520823][ T4307] 
[  869.675278][T13164] loop6: detected capacity change from 0 to 2048
[  869.734350][T13165] loop7: detected capacity change from 0 to 2048
[  869.816148][T13165] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  869.860839][T13165] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  869.918370][T13165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  869.934374][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  869.941639][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  870.016290][T13158] loop9: detected capacity change from 0 to 32768
[  870.066901][T13164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  870.099870][T13158] (syz.9.2220,13158,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  870.134546][T13158] (syz.9.2220,13158,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  870.254256][T13158] JBD2: Ignoring recovery information on journal
[  870.384230][T13158] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  871.642887][T12154] ocfs2: Unmounting device (7,9) on (node local)
[  871.659235][T13204] loop7: detected capacity change from 0 to 1024
[  871.783973][T13204] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  873.715610][T13225] loop9: detected capacity change from 0 to 512
[  873.824170][T13225] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  873.909280][T13225] EXT4-fs (loop9): 1 truncate cleaned up
[  873.915145][T13225] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  874.350071][T13242] input: syz1 as /devices/virtual/input/input10
[  876.688742][T13265] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2253'.
[  878.190794][T12385] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  878.471720][T12385] usb 8-1: Using ep0 maxpacket: 16
[  878.490720][T12160] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  878.801285][T12385] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  878.825464][T12385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.852889][T12385] usb 8-1: Product: syz
[  878.863877][T12385] usb 8-1: Manufacturer: syz
[  878.882557][T12385] usb 8-1: SerialNumber: syz
[  879.130838][T12160] usb 10-1: Using ep0 maxpacket: 32
[  879.364000][T12385] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  879.465835][T12385] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  879.605937][T12385] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  879.658980][T12385] usb 8-1: media controller created
[  879.832195][T12385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  879.908302][T12385] zl10353_read_register: readreg error (reg=127, ret==-71)
[  879.950814][T12160] usb 10-1: config 0 has an invalid interface number: 136 but max is 0
[  879.959123][T12160] usb 10-1: config 0 has no interface number 0
[  879.973913][T12160] usb 10-1: config 0 interface 136 has no altsetting 0
[  879.993777][T12385] dvb_usb_gl861: probe of 8-1:157.0 failed with error -5
[  880.030138][T12385] usb 8-1: USB disconnect, device number 13
[  880.141246][T12160] usb 10-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  880.171722][T12160] usb 10-1: New USB device strings: Mfr=10, Product=2, SerialNumber=3
[  880.179992][T12160] usb 10-1: Product: syz
[  880.204813][T12160] usb 10-1: Manufacturer: syz
[  880.209596][T12160] usb 10-1: SerialNumber: syz
[  880.258767][T12160] usb 10-1: config 0 descriptor??
[  880.543140][T12160] usb 10-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  880.637589][T13324] loop7: detected capacity change from 0 to 1024
[  880.700036][T13324] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  881.382620][T12160] usb 10-1: reset high-speed USB device number 5 using dummy_hcd
[  881.922339][T12160] usb 10-1: failed to restore interface 136 altsetting 233 (error=-71)
[  881.978738][T12160] ueagle-atm 10-1:0.136: usbatm_usb_probe: bind failed: -19!
[  882.030792][T12160] usb 10-1: USB disconnect, device number 5
[  882.100174][T13344] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  886.560251][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'.
[  887.510842][ T4941] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  888.120771][ T4941] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  888.151106][ T4941] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  888.231150][ T4941] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  888.240317][ T4941] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  888.280704][ T4941] usb 10-1: SerialNumber: syz
[  888.344385][T13438] loop6: detected capacity change from 0 to 1024
[  888.893763][ T4941] usb 10-1: 0:2 : does not exist
[  888.925672][ T4941] usb 10-1: USB disconnect, device number 6
[  889.112021][T13438] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  889.424646][T13455] loop9: detected capacity change from 0 to 1024
[  889.501472][T13455] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  894.689736][T13530] loop7: detected capacity change from 0 to 1024
[  894.848419][T13530] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,grpquota,grpid,nombcache,,errors=continue. Quota mode: writeback.
[  894.920791][T13530] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  895.036420][T13530] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: comm syz.7.2334: lblock 0 mapped to illegal pblock 0 (length 1)
[  895.059023][   T26] audit: type=1804 audit(1783066673.212:101): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2334" name="/newroot/190/file1/file1" dev="loop7" ino=15 res=1 errno=0
[  895.134578][T13530] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  895.170043][T13530] EXT4-fs (loop7): This should not happen!! Data will be lost
[  895.170043][T13530] 
[  895.195457][T13545] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #15: comm syz.7.2334: lblock 0 mapped to illegal pblock 0 (length 1)
[  895.225162][   T26] audit: type=1800 audit(1783066673.382:102): pid=13545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2334" name="file1" dev="loop7" ino=15 res=0 errno=0
[  897.804872][T13588] syz.6.2344[13588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  897.804999][T13588] syz.6.2344[13588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  898.585577][T13590] loop9: detected capacity change from 0 to 1024
[  898.759253][T13598] loop7: detected capacity change from 0 to 1024
[  898.789026][T13590] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  899.200344][T13598] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  899.656431][T13611] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  899.886031][T13611] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  902.944958][T13645] device lo entered promiscuous mode
[  904.755297][T13689] loop9: detected capacity change from 0 to 1024
[  904.941889][T13689] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  905.699207][T13687] loop7: detected capacity change from 0 to 32768
[  905.859442][T13687] XFS (loop7): Mounting V5 Filesystem
[  905.961188][T13687] XFS (loop7): Ending clean mount
[  906.014685][T13687] XFS (loop7): User initiated shutdown received.
[  906.064660][T13687] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  906.118325][T13687] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  906.191101][ T9074] XFS (loop7): Unmounting Filesystem
[  906.284624][T13719] virt_wifi0 speed is unknown, defaulting to 1000
[  906.937130][T13737] netlink: 'syz.7.2386': attribute type 3 has an invalid length.
[  909.444705][T13776] xt_hashlimit: max too large, truncated to 1048576
[  909.590057][T13782] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  911.913387][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2414'.
[  911.931491][T13810] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2414'.
[  913.269311][T13829] loop7: detected capacity change from 0 to 32768
[  913.360816][T13829] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  913.369508][T13829] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  913.547468][T13829] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  913.576555][T11600] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  913.591187][T11600] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  913.681451][T11600] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 90ms
[  913.691754][T11600] gfs2: fsid=syz:syz.0: jid=0: Done
[  913.700059][T13829] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  913.961621][T11600] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  914.472923][T13831] loop9: detected capacity change from 0 to 40427
[  914.530649][T13831] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  914.556141][T13831] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  914.625579][T13831] F2FS-fs (loop9): invalid crc value
[  914.659102][T13831] F2FS-fs (loop9): Found nat_bits in checkpoint
[  914.761715][T11600] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  914.778032][T13831] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  914.786361][T11600] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  914.796811][T13831] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  914.809471][T11600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  914.828213][T11600] usb 7-1: config 0 descriptor??
[  914.868097][T13831] attempt to access beyond end of device
[  914.868097][T13831] loop9: rw=2049, want=45224, limit=40427
[  914.883592][T11600] pwc: Askey VC010 type 2 USB webcam detected.
[  915.031704][T12154] attempt to access beyond end of device
[  915.031704][T12154] loop9: rw=2049, want=40968, limit=40427
[  915.360752][T11600] pwc: recv_control_msg error -32 req 02 val 2b00
[  915.410782][T11600] pwc: recv_control_msg error -32 req 02 val 2700
[  915.480989][T11600] pwc: recv_control_msg error -32 req 02 val 2c00
[  915.800804][T11600] pwc: recv_control_msg error -71 req 04 val 1300
[  915.820828][T11600] pwc: recv_control_msg error -71 req 04 val 1400
[  915.880936][T11600] pwc: recv_control_msg error -71 req 02 val 2000
[  915.901093][T11600] pwc: recv_control_msg error -71 req 02 val 2100
[  915.929722][T11600] pwc: recv_control_msg error -71 req 04 val 1500
[  915.950753][T11600] pwc: recv_control_msg error -71 req 02 val 2500
[  916.000889][T11600] pwc: recv_control_msg error -71 req 02 val 2400
[  916.024458][T11600] pwc: recv_control_msg error -71 req 02 val 2600
[  916.205877][T11600] pwc: recv_control_msg error -71 req 02 val 2900
[  916.230775][T11600] pwc: recv_control_msg error -71 req 02 val 2800
[  916.250935][T11600] pwc: recv_control_msg error -71 req 04 val 1100
[  916.270773][T11600] pwc: recv_control_msg error -71 req 04 val 1200
[  916.446257][T13877] netlink: 'syz.9.2432': attribute type 10 has an invalid length.
[  916.454216][T13877] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2432'.
[  916.510646][T13877] team0: Port device geneve0 added
[  916.831725][T11600] pwc: Registered as video103.
[  916.838243][T11600] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11
[  916.851495][T11600] usb 7-1: USB disconnect, device number 15
[  917.195171][T13891] loop9: detected capacity change from 0 to 128
[  917.402423][T13895] virt_wifi0 speed is unknown, defaulting to 1000
[  917.553669][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2443'.
[  917.912387][T13913] loop7: detected capacity change from 0 to 256
[  917.974905][T13913] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  918.043961][   T26] audit: type=1800 audit(1783066696.202:103): pid=13913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2446" name="file1" dev="loop7" ino=1048629 res=0 errno=0
[  918.064650][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2441'.
[  918.080745][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2441'.
[  918.526763][T13925] loop7: detected capacity change from 0 to 1024
[  918.717085][T13925] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  918.994426][T13935] loop9: detected capacity change from 0 to 1024
[  919.542135][T13935] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  921.799067][T13968] loop7: detected capacity change from 0 to 1024
[  921.898929][T13968] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  922.907203][T14000] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2473'.
[  928.720109][T14070] loop7: detected capacity change from 0 to 1024
[  928.992914][T14070] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  931.380943][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  931.387308][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  933.450713][T12385] Bluetooth: hci5: command 0x0406 tx timeout
[  935.519233][T14200] IPVS: Scheduler module ip_vs_ not found
[  935.832870][T14209] overlayfs: failed to clone upperpath
[  935.961572][T14215] overlayfs: upper fs does not support file handles, falling back to index=off.
[  937.390535][T14250] loop7: detected capacity change from 0 to 1024
[  937.509993][T14250] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  939.908216][T14285] xt_hashlimit: size too large, truncated to 1048576
[  940.846138][T14290] loop7: detected capacity change from 0 to 32768
[  940.943722][T14290] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.2561 (14290)
[  940.987086][T14290] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  941.011859][T14290] BTRFS info (device loop7): setting nodatasum
[  941.038642][T14290] BTRFS info (device loop7): force zlib compression, level 3
[  941.070064][T14290] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8)
[  941.100989][T14290] BTRFS info (device loop7): use lzo compression, level 0
[  941.108164][T14290] BTRFS info (device loop7): turning on flush-on-commit
[  941.135757][T14290] BTRFS info (device loop7): enabling auto defrag
[  941.156018][T14290] BTRFS info (device loop7): max_inline at 4096
[  941.181630][T14290] BTRFS info (device loop7): force zlib compression, level 3
[  941.209381][T14290] BTRFS info (device loop7): using free space tree
[  941.221019][T14290] BTRFS info (device loop7): has skinny extents
[  941.443197][T14290] BTRFS info (device loop7): enabling ssd optimizations
[  941.872018][T12269] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop7 scanned by udevd (12269)
[  942.963372][T14360] netlink: 'syz.7.2570': attribute type 10 has an invalid length.
[  942.971321][T14360] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2570'.
[  943.540676][T14354] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  943.796683][T14354] usb 10-1: Using ep0 maxpacket: 8
[  943.921038][T14354] usb 10-1: config 179 has an invalid interface number: 65 but max is 0
[  943.929423][T14354] usb 10-1: config 179 has no interface number 0
[  943.972855][T14354] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  944.003459][T14354] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  944.057034][T14354] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  944.069807][T14354] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  944.089219][T14354] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  944.111072][T14354] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  944.120529][T14354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  944.161027][T14364] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  944.531648][T14354] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input12
[  944.617517][T14364] udc-core: couldn't find an available UDC or it's busy
[  944.636310][T14364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  945.051910][T14364] udc-core: couldn't find an available UDC or it's busy
[  945.079247][T14364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  945.143018][T14354] usb 10-1: USB disconnect, device number 7
[  945.160639][    C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  945.778583][T14412] netlink: 'syz.7.2588': attribute type 10 has an invalid length.
[  945.786957][T14412] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2588'.
[  946.030818][T14354] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  946.090895][   T27] INFO: task kworker/0:13:4608 blocked for more than 143 seconds.
[  946.108933][   T27]       Not tainted syzkaller #0
[  946.120778][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  946.149787][   T27] task:kworker/0:13    state:D stack:23312 pid: 4608 ppid:     2 flags:0x00004000
[  946.190229][   T27] Workqueue: usb_hub_wq hub_event
[  946.200383][   T27] Call Trace:
[  946.217403][   T27]  <TASK>
[  946.220397][   T27]  __schedule+0x11c3/0x4350
[  946.235235][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  946.240347][   T27]  ? release_firmware_map_entry+0x190/0x190
[  946.270665][T14354] usb 10-1: Using ep0 maxpacket: 32
[  946.275987][   T27]  ? try_to_wake_up+0x69a/0x1020
[  946.300695][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  946.311192][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  946.330890][   T27]  schedule+0x11b/0x1e0
[  946.335143][   T27]  schedule_timeout+0xbd/0x2d0
[  946.362489][   T27]  ? console_conditional_schedule+0x40/0x40
[  946.368451][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  946.390880][T14354] usb 10-1: config 0 has no interfaces?
[  946.397283][T14354] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  946.410710][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  946.415789][   T27]  ? lock_chain_count+0x20/0x20
[  946.440689][T14354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.448937][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  946.471775][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  946.481591][T14354] usb 10-1: config 0 descriptor??
[  946.492532][   T27]  do_wait_for_common+0x295/0x460
[  946.509760][   T27]  ? console_conditional_schedule+0x40/0x40
[  946.529933][   T27]  ? wait_for_completion_killable_timeout+0x60/0x60
[  946.547886][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  946.565435][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  946.590063][   T27]  ? kthread_data+0x4b/0xc0
[  946.606258][   T27]  wait_for_completion+0x48/0x60
[  946.625318][   T27]  flush_workqueue+0x667/0x1390
[  946.630245][   T27]  ? rcu_work_rcufn+0x120/0x120
[  946.655842][   T27]  ? ath6kl_bmi_done+0x1a0/0x1a0
[  946.670663][   T27]  ? ath6kl_core_init+0x1e2/0x10a0
[  946.675843][   T27]  ath6kl_usb_power_off+0x34/0x40
[  946.703046][   T27]  ath6kl_core_init+0xac4/0x10a0
[  946.708064][   T27]  ? lockdep_softirqs_off+0x430/0x430
[  946.735781][T14354] usb 10-1: USB disconnect, device number 8
[  946.766580][   T27]  ? ath6kl_core_rx_complete+0x70/0x70
[  946.782531][   T27]  ? ath6kl_core_create+0x7d6/0x980
[  946.802334][   T27]  ath6kl_usb_probe+0x1301/0x1410
[  946.827884][   T27]  ? _raw_spin_unlock+0x40/0x40
[  946.844422][   T27]  usb_probe_interface+0x5be/0xae0
[  946.861723][   T27]  ? usb_register_driver+0x3c0/0x3c0
[  946.879736][   T27]  really_probe+0x276/0xc70
[  946.892253][   T27]  ? pm_runtime_barrier+0x147/0x1c0
[  946.914275][   T27]  __driver_probe_device+0x1f5/0x390
[  946.934706][   T27]  driver_probe_device+0x4f/0x420
[  946.950278][   T27]  __device_attach_driver+0x2b0/0x500
[  946.965980][   T27]  ? deferred_probe_work_func+0x230/0x230
[  946.985531][   T27]  bus_for_each_drv+0x184/0x210
[  947.002703][   T27]  ? deferred_probe_work_func+0x230/0x230
[  947.016680][   T27]  ? subsys_find_device_by_id+0x360/0x360
[  947.031059][   T27]  __device_attach+0x2a7/0x480
[  947.036476][   T27]  ? device_attach+0x20/0x20
[  947.044195][   T27]  bus_probe_device+0xba/0x1d0
[  947.049169][   T27]  device_add+0xbcf/0x1050
[  947.054860][   T27]  usb_set_configuration+0x19d5/0x2030
[  947.060667][   T27]  usb_generic_driver_probe+0x89/0x150
[  947.066236][   T27]  usb_probe_device+0x126/0x250
[  947.071703][   T27]  ? usb_register_device_driver+0x230/0x230
[  947.077713][   T27]  really_probe+0x276/0xc70
[  947.082507][   T27]  ? pm_runtime_barrier+0x147/0x1c0
[  947.087987][   T27]  __driver_probe_device+0x1f5/0x390
[  947.094593][   T27]  driver_probe_device+0x4f/0x420
[  947.099745][   T27]  __device_attach_driver+0x2b0/0x500
[  947.105333][   T27]  ? deferred_probe_work_func+0x230/0x230
[  947.111969][   T27]  bus_for_each_drv+0x184/0x210
[  947.117053][   T27]  ? deferred_probe_work_func+0x230/0x230
[  947.122959][   T27]  ? subsys_find_device_by_id+0x360/0x360
[  947.128877][   T27]  __device_attach+0x2a7/0x480
[  947.134181][   T27]  ? device_attach+0x20/0x20
[  947.140049][   T27]  ? kobject_uevent_env+0x36c/0x890
[  947.145533][   T27]  bus_probe_device+0xba/0x1d0
[  947.150498][   T27]  device_add+0xbcf/0x1050
[  947.158776][   T27]  usb_new_device+0x9f6/0x15d0
[  947.164477][   T27]  ? usb_disconnect+0x8a0/0x8a0
[  947.169491][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  947.175418][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  947.180822][   T27]  hub_event+0x2b8d/0x5260
[  947.185467][   T27]  ? hub_post_resume+0x120/0x120
[  947.190500][   T27]  ? read_lock_is_recursive+0x10/0x10
[  947.196444][   T27]  ? _raw_spin_unlock_irq+0x1f/0x40
[  947.201857][   T27]  process_one_work+0x867/0xff0
[  947.206951][   T27]  ? worker_detach_from_pool+0x240/0x240
[  947.215074][   T27]  ? lockdep_hardirqs_off+0x70/0x100
[  947.220572][   T27]  ? _raw_spin_lock_irq+0xb7/0xf0
[  947.225747][   T27]  ? _raw_spin_lock_irqsave+0x100/0x100
[  947.231971][   T27]  ? wq_worker_running+0x97/0x170
[  947.237112][   T27]  worker_thread+0xad7/0x12a0
[  947.246445][   T27]  kthread+0x42e/0x520
[  947.256258][   T27]  ? rcu_lock_release+0x20/0x20
[  947.269994][   T27]  ? kthread_blkcg+0xd0/0xd0
[  947.278305][   T27]  ret_from_fork+0x1f/0x30
[  947.287327][   T27]  </TASK>
[  947.290516][   T27] INFO: task udevd:11808 blocked for more than 144 seconds.
[  947.301869][   T27]       Not tainted syzkaller #0
[  947.306918][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  947.325122][   T27] task:udevd           state:D stack:23856 pid:11808 ppid:  3560 flags:0x00004002
[  947.343010][   T27] Call Trace:
[  947.346511][   T27]  <TASK>
[  947.349543][   T27]  __schedule+0x11c3/0x4350
[  947.354401][   T27]  ? rcu_lock_acquire+0x30/0x30
[  947.359445][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  947.365348][   T27]  ? release_firmware_map_entry+0x190/0x190
[  947.375143][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  947.380274][   T27]  ? __mutex_trylock_common+0x86/0x260
[  947.386926][   T27]  ? rcu_lock_release+0x20/0x20
[  947.392022][   T27]  schedule+0x11b/0x1e0
[  947.396351][   T27]  schedule_preempt_disabled+0xf/0x20
[  947.402206][   T27]  __mutex_lock_common+0xdf5/0x2400
[  947.407603][   T27]  ? uevent_show+0x16c/0x320
[  947.412373][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  947.418715][   T27]  mutex_lock_nested+0x17/0x20
[  947.424019][   T27]  uevent_show+0x16c/0x320
[  947.428539][   T27]  dev_attr_show+0x50/0xb0
[  947.433255][   T27]  ? device_get_ownership+0xa0/0xa0
[  947.438566][   T27]  sysfs_kf_seq_show+0x316/0x4c0
[  947.444103][   T27]  seq_read_iter+0x460/0xc50
[  947.448842][   T27]  vfs_read+0x75e/0xd50
[  947.453423][   T27]  ? kernel_read+0x1e0/0x1e0
[  947.458236][   T27]  ? __fdget_pos+0x2c6/0x370
[  947.463331][   T27]  ksys_read+0x153/0x260
[  947.467684][   T27]  ? vfs_write+0xd70/0xd70
[  947.474623][   T27]  ? lockdep_hardirqs_on+0x94/0x140
[  947.485565][   T27]  do_syscall_64+0x4c/0xa0
[  947.496947][   T27]  ? clear_bhb_loop+0x30/0x80
[  947.506651][   T27]  ? clear_bhb_loop+0x30/0x80
[  947.514971][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  947.527079][   T27] RIP: 0033:0x7f9debb11407
[  947.535374][   T27] RSP: 002b:00007fffb16e6290 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[  947.548645][   T27] RAX: ffffffffffffffda RBX: 00007f9deba23880 RCX: 00007f9debb11407
[  947.560250][   T27] RDX: 0000000000001000 RSI: 0000564955a2ae50 RDI: 0000000000000008
[  947.573156][   T27] RBP: 00007f9debc59ff0 R08: 0000000000000000 R09: 0000000000000000
[  947.585837][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[  947.597403][   T27] R13: 00007f9debc59ea0 R14: 0000000000000000 R15: 0000564955a02280
[  947.614221][   T27]  </TASK>
[  947.617324][   T27] INFO: task syz.0.1841:12032 blocked for more than 144 seconds.
[  947.627566][   T27]       Not tainted syzkaller #0
[  947.632816][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  947.642185][   T27] task:syz.0.1841      state:D stack:27888 pid:12032 ppid:  4199 flags:0x00004004
[  947.661342][   T27] Call Trace:
[  947.664737][   T27]  <TASK>
[  947.667783][   T27]  __schedule+0x11c3/0x4350
[  947.672883][   T27]  ? rcu_lock_acquire+0x30/0x30
[  947.677851][   T27]  ? __mutex_lock_common+0xdf0/0x2400
[  947.684061][   T27]  ? release_firmware_map_entry+0x190/0x190
[  947.690079][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  947.697971][   T27]  ? __mutex_trylock_common+0x86/0x260
[  947.704083][   T27]  ? rcu_lock_release+0x20/0x20
[  947.709078][   T27]  schedule+0x11b/0x1e0
[  947.713673][   T27]  schedule_preempt_disabled+0xf/0x20
[  947.719210][   T27]  __mutex_lock_common+0xdf5/0x2400
[  947.730411][   T27]  ? usbdev_open+0x14e/0x7a0
[  947.735328][   T27]  ? mutex_lock_io_nested+0x60/0x60
[  947.741209][   T27]  ? device_match_fwnode+0x30/0x30
[  947.746455][   T27]  ? bus_for_each_dev+0x1f0/0x1f0
[  947.751934][   T27]  mutex_lock_nested+0x17/0x20
[  947.756805][   T27]  usbdev_open+0x14e/0x7a0
[  947.761994][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  947.767131][   T27]  ? usbdev_mmap+0x6d0/0x6d0
[  947.772305][   T27]  ? memset+0x1e/0x40
[  947.776439][   T27]  ? do_raw_spin_unlock+0x11d/0x230
[  947.782485][   T27]  chrdev_open+0x585/0x5f0
[  947.787024][   T27]  ? cd_forget+0x160/0x160
[  947.791814][   T27]  ? fsnotify_perm+0x3a7/0x560
[  947.796742][   T27]  ? cd_forget+0x160/0x160
[  947.801899][   T27]  do_dentry_open+0x7f7/0xf90
[  947.806685][   T27]  ? vfs_open+0x2b/0x80
[  947.811402][   T27]  path_openat+0x2718/0x2fb0
[  947.817267][   T27]  ? __kasan_slab_alloc+0xa9/0xc0
[  947.823065][   T27]  ? do_filp_open+0x400/0x400
[  947.828342][   T27]  do_filp_open+0x1df/0x400
[  947.836477][   T27]  ? vfs_tmpfile+0x300/0x300
[  947.843434][   T27]  ? _raw_spin_unlock+0x24/0x40
[  947.848331][   T27]  ? alloc_fd+0x59e/0x650
[  947.858296][   T27]  do_sys_openat2+0x14b/0x500
[  947.865411][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  947.870471][   T27]  ? do_sys_open+0xe0/0xe0
[  947.880577][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  947.888961][   T27]  ? lock_chain_count+0x20/0x20
[  947.897811][   T27]  __x64_sys_openat+0x135/0x160
[  947.903981][   T27]  do_syscall_64+0x4c/0xa0
[  947.908537][   T27]  ? clear_bhb_loop+0x30/0x80
[  947.913609][   T27]  ? clear_bhb_loop+0x30/0x80
[  947.918382][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  947.925016][   T27] RIP: 0033:0x7f879015768e
[  947.930273][   T27] RSP: 002b:00007f878e3eeb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  947.939338][   T27] RAX: ffffffffffffffda RBX: 00007f878e3ef6c0 RCX: 00007f879015768e
[  947.951668][   T27] RDX: 0000000000101301 RSI: 00007f878e3eec00 RDI: ffffffffffffff9c
[  947.959752][   T27] RBP: 00007f878e3eec00 R08: 0000000000000000 R09: 0000000000000000
[  947.971055][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  947.979131][   T27] R13: 00007f879041f038 R14: 00007f879041efa0 R15: 00007fff13d4c228
[  947.987603][   T27]  </TASK>
[  947.991275][   T27] 
[  947.991275][   T27] Showing all locks held in the system:
[  947.999034][   T27] 2 locks held by kworker/1:1/23:
[  948.005964][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  948.018175][   T27]  #1: ffffc90000ddfd00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  948.030014][   T27] 1 lock held by khungtaskd/27:
[  948.036246][   T27]  #0: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  948.045883][   T27] 2 locks held by getty/3945:
[  948.050756][   T27]  #0: ffff88814d068098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  948.060729][   T27]  #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50
[  948.071088][   T27] 5 locks held by kworker/0:13/4608:
[  948.076451][   T27]  #0: ffff88801bd3e938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  948.087258][   T27]  #1: ffffc900039afd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  948.098711][   T27]  #2: ffff888148063220 (&dev->mutex){....}-{3:3}, at: hub_event+0x178/0x5260
[  948.107767][   T27]  #3: ffff888079b4d220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480
[  948.117195][   T27]  #4: ffff88802b7c31a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480
[  948.126654][   T27] 4 locks held by udevd/11808:
[  948.131574][   T27]  #0: ffff888069351668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0x9d/0xc50
[  948.141307][   T27]  #1: ffff88801d4c8c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x55/0x3c0
[  948.152624][   T27]  #2: ffff88801b3a0490 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0
[  948.162317][   T27]  #3: ffff888079b4d220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320
[  948.171622][   T27] 1 lock held by syz.0.1841/12032:
[  948.176844][   T27]  #0: ffff888148063220 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x14e/0x7a0
[  948.186036][   T27] 
[  948.188440][   T27] =============================================
[  948.188440][   T27] 
[  948.197612][   T27] NMI backtrace for cpu 0
[  948.201958][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  948.209165][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  948.219238][   T27] Call Trace:
[  948.222528][   T27]  <TASK>
[  948.225468][   T27]  dump_stack_lvl+0x188/0x250
[  948.230163][   T27]  ? show_regs_print_info+0x20/0x20
[  948.235383][   T27]  ? load_image+0x410/0x410
[  948.239910][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  948.245315][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  948.250457][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  948.255415][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  948.261586][   T27]  ? _printk+0xda/0x130
[  948.265754][   T27]  ? load_image+0x410/0x410
[  948.270274][   T27]  ? load_image+0x410/0x410
[  948.274796][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  948.280882][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  948.286890][   T27]  watchdog+0xe1b/0xe60
[  948.291078][   T27]  kthread+0x42e/0x520
[  948.295167][   T27]  ? hungtask_pm_notify+0x40/0x40
[  948.300235][   T27]  ? kthread_blkcg+0xd0/0xd0
[  948.304838][   T27]  ret_from_fork+0x1f/0x30
[  948.309284][   T27]  </TASK>
[  948.313164][   T27] Sending NMI from CPU 0 to CPUs 1:
[  948.318428][    C1] NMI backtrace for cpu 1
[  948.318437][    C1] CPU: 1 PID: 12385 Comm: kworker/1:21 Not tainted syzkaller #0
[  948.318453][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  948.318464][    C1] Workqueue: events nsim_dev_trap_report_work
[  948.318484][    C1] RIP: 0010:mark_lock+0x1/0x320
[  948.318501][    C1] Code: c1 7c 90 48 c7 c7 c8 21 8b 8d e8 ea 83 60 00 4c 89 f7 41 89 d9 e9 79 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 <41> 57 41 56 41 55 41 54 53 50 89 d5 49 89 f6 48 89 fb 49 bd 00 00
[  948.318515][    C1] RSP: 0018:ffffc90003cdf990 EFLAGS: 00000002
[  948.318527][    C1] RAX: 0000000000000000 RBX: ffff88802082bb80 RCX: ffffffff815d8f84
[  948.318539][    C1] RDX: 0000000000000002 RSI: ffff88802082c698 RDI: ffff88802082bb80
[  948.318550][    C1] RBP: ffffc90003cdfa60 R08: ffffffff901e90df R09: 1ffffffff203d21b
[  948.318562][    C1] R10: dffffc0000000000 R11: fffffbfff203d21c R12: ffff88802082c6b8
[  948.318574][    C1] R13: 0000000000000001 R14: 1ffff110041058cd R15: ffff88802082c698
[  948.318585][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  948.318599][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  948.318610][    C1] CR2: 000000110c40c13c CR3: 000000004ca21000 CR4: 00000000003506e0
[  948.318625][    C1] Call Trace:
[  948.318629][    C1]  <TASK>
[  948.318634][    C1]  lockdep_hardirqs_on_prepare+0x237/0x7c0
[  948.318656][    C1]  ? lock_chain_count+0x20/0x20
[  948.318675][    C1]  ? kasan_quarantine_put+0x39/0x210
[  948.318693][    C1]  trace_hardirqs_on+0x67/0x80
[  948.318709][    C1]  kasan_quarantine_put+0xd4/0x210
[  948.318726][    C1]  slab_free_freelist_hook+0xec/0x170
[  948.318743][    C1]  ? nsim_dev_trap_report_work+0x771/0xab0
[  948.318760][    C1]  kmem_cache_free+0x8f/0x210
[  948.318774][    C1]  ? skb_release_head_state+0x1e7/0x240
[  948.318793][    C1]  nsim_dev_trap_report_work+0x771/0xab0
[  948.318821][    C1]  process_one_work+0x867/0xff0
[  948.318844][    C1]  ? worker_detach_from_pool+0x240/0x240
[  948.318861][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  948.318879][    C1]  ? _raw_spin_lock_irq+0xb7/0xf0
[  948.318897][    C1]  ? _raw_spin_lock_irqsave+0x100/0x100
[  948.318917][    C1]  ? wq_worker_running+0x97/0x170
[  948.318933][    C1]  worker_thread+0xad7/0x12a0
[  948.318954][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  948.318978][    C1]  kthread+0x42e/0x520
[  948.318991][    C1]  ? rcu_lock_release+0x20/0x20
[  948.319006][    C1]  ? kthread_blkcg+0xd0/0xd0
[  948.319021][    C1]  ret_from_fork+0x1f/0x30
[  948.319043][    C1]  </TASK>
[  948.327563][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  948.571482][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  948.578700][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  948.588780][   T27] Call Trace:
[  948.592078][   T27]  <TASK>
[  948.595028][   T27]  dump_stack_lvl+0x188/0x250
[  948.599732][   T27]  ? show_regs_print_info+0x20/0x20
[  948.604953][   T27]  ? load_image+0x410/0x410
[  948.609493][   T27]  panic+0x2f8/0x850
[  948.613411][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  948.619074][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  948.623610][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  948.629200][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  948.635400][   T27]  watchdog+0xe5a/0xe60
[  948.639597][   T27]  kthread+0x42e/0x520
[  948.643686][   T27]  ? hungtask_pm_notify+0x40/0x40
[  948.648743][   T27]  ? kthread_blkcg+0xd0/0xd0
[  948.653375][   T27]  ret_from_fork+0x1f/0x30
[  948.657830][   T27]  </TASK>
[  948.661151][   T27] Kernel Offset: disabled
[  948.665518][   T27] Rebooting in 86400 seconds..